{ "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", "@graph": [ { "@id": "_:creationInfo_0", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd0" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/additionalToolSPDXRef-gnrtd1" ], "created": "2026-10-02T05:09:57Z" }, { "@id": "_:creationInfo_1", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd2" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/additionalToolSPDXRef-gnrtd3" ], "created": "2026-10-02T05:09:57Z" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16631", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16629", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16113", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16109", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3464", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd178" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3463", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3466", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd178" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3463", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16111", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16109", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16637", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16598", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16594", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16635", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16596", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16594", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16633", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16629", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16634", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3463" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16628", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16629" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16626", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16594" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16627", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16109" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd197", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "Apache-2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd178", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "BSD-3-Clause", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16632", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16636", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3465", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16112", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16597", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16629", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16632", "name": "apache-commons-io", "software_sourceInfo": "acquired package info from repodata DB: repodata/d5dc399c94eea659ed2585c32a1ad22148342df12e300f0fa481873cdbf6214a-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-io@2.20.0-1.oe2609?arch=noarch&epoch=1&upstream=apache-commons-io-2.20.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Utilities to assist with developing IO functionality", "software_packageVersion": "1:2.20.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-io/", "description": "Commons-IO contains utility classes, stream implementations,\nfile filters, and endian classes. It is a library of utilities\nto assist with developing IO functionality.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-io@2.20.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/commons-io/commons-io@2.20.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16109", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16112", "name": "apache-commons-lang3", "software_sourceInfo": "acquired package info from repodata DB: repodata/d5dc399c94eea659ed2585c32a1ad22148342df12e300f0fa481873cdbf6214a-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-lang3@3.20.0-1.oe2609?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.20.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Provides a host of helper utilities for the java.lang API", "software_packageVersion": "0:3.20.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-lang/", "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nThe Commons Lang Component provides a host of helper utilities for the\njava.lang API, notably String manipulation methods, basic numerical\nmethods, object reflection, creation and serialization, and System\nproperties. Additionally it contains an inheritable enum type, an\nexception structure that supports multiple types of nested-Exceptions\nand a series of utilities dedicated to help with building methods, such\nas hashCode, toString and equals.\n\nWith version of commons-lang 3.x, developers decided to change API and\ntherefore created differently named artifact and jar files. This is\nthe new version, while apache-commons-lang is the compatibility\npackage.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-lang3@3.20.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3463", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd3465", "software_downloadLocation": "NOASSERTION", "summary": "Java packages filesystem layout", "software_packageVersion": "0:6.2.0-1.oe2609", "software_homePage": "https://github.com/fedora-java/javapackages", "description": "This package provides some basic directories into which Java packages\ninstall their content.", "name": "javapackages-filesystem", "software_sourceInfo": "acquired package info from repodata DB: repodata/d5dc399c94eea659ed2585c32a1ad22148342df12e300f0fa481873cdbf6214a-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/javapackages-filesystem@6.2.0-1.oe2609?arch=noarch&epoch=0&upstream=javapackages-tools-6.2.0-1.oe2609.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16594", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16597", "name": "apache-commons-codec", "software_sourceInfo": "acquired package info from repodata DB: repodata/d5dc399c94eea659ed2585c32a1ad22148342df12e300f0fa481873cdbf6214a-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-codec@1.19.0-1.oe2609?arch=noarch&epoch=0&upstream=apache-commons-codec-1.19.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Apache common encoders and decoders", "software_packageVersion": "0:1.19.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-codec/", "description": "Apache Commons Codec (TM) software provides implementations of common\nencoders and decoders such as Base64, Hex, Phonetic and URLs.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/commons-codec/commons-codec@1.19.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16625", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/SPDXRef-gnrtd16636", "name": "apache-commons-compress", "software_sourceInfo": "acquired package info from repodata DB: repodata/d5dc399c94eea659ed2585c32a1ad22148342df12e300f0fa481873cdbf6214a-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-compress@1.28.0-1.oe2609?arch=noarch&epoch=0&upstream=apache-commons-compress-1.28.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Java API for working with compressed files and archivers", "software_packageVersion": "0:1.28.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-compress/", "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed form this package.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/commons/commons-compress@1.28.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-compress@1.28.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/additionalToolSPDXRef-gnrtd3", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_1" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/aarch64-663c9b2e-215e-45cc-b37e-8ad2a96dc761-specv3/additionalToolSPDXRef-gnrtd1", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_0" } ] }