{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "@id": "_:creationInfo_1",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd2"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3"
      ],
      "created": "2026-10-02T04:15:47Z"
    },
    {
      "@id": "_:creationInfo_0",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd0"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1"
      ],
      "created": "2026-10-02T04:15:47Z"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17045",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17050",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43599",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16529",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16530"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16526",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16527"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43597",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17047",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4262",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17048",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4264",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43594",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43596",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43593",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43595",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16527",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "Apache-2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16530",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "BSD-3-Clause",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17046",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17049",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16528",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43598",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16528",
      "name": "plexus-utils",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/plexus-utils@3.5.1-1.oe2609?arch=noarch&epoch=0&upstream=plexus-utils-3.5.1-1.oe2609.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Plexus Common Utilities",
      "software_packageVersion": "0:3.5.1-1.oe2609",
      "software_homePage": "https://codehaus-plexus.github.io/plexus-utils/",
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/plexus/plexus-utils@3.5.1"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Java packages filesystem layout",
      "software_packageVersion": "0:6.2.0-1.oe2609",
      "software_homePage": "https://github.com/fedora-java/javapackages",
      "description": "This package provides some basic directories into which Java packages\ninstall their content.",
      "name": "javapackages-filesystem",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/javapackages-filesystem@6.2.0-1.oe2609?arch=noarch&epoch=0&upstream=javapackages-tools-6.2.0-1.oe2609.src.rpm",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17049",
      "name": "maven-archiver",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/maven-archiver@3.6.2-1.oe2609?arch=noarch&epoch=0&upstream=maven-archiver-3.6.2-1.oe2609.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Maven Archiver",
      "software_packageVersion": "0:3.6.2-1.oe2609",
      "software_homePage": "https://maven.apache.org/shared/maven-archiver/",
      "description": "The Maven Archiver is used by other Maven plugins\nto handle packaging",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.maven/maven-archiver@3.6.2"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17046",
      "name": "plexus-archiver",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/plexus-archiver@4.10.0-1.oe2609?arch=noarch&epoch=0&upstream=plexus-archiver-4.10.0-1.oe2609.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Plexus Archiver Component",
      "software_packageVersion": "0:4.10.0-1.oe2609",
      "software_homePage": "https://codehaus-plexus.github.io/plexus-archiver",
      "description": "The Plexus project seeks to create end-to-end developer tools for\nwriting applications. At the core is the container, which can be\nembedded or for a full scale application server. There are many\nreusable components for hibernate, form processing, jndi, i18n,\nvelocity, etc. Plexus also includes an application server which\nis like a J2EE application server, without all the baggage.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43592",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd43598",
      "name": "maven-source-plugin",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/maven-source-plugin@3.3.0-1.oe2609?arch=noarch&epoch=0&upstream=maven-source-plugin-3.3.0-1.oe2609.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Source Plugin creating a jar archive of source",
      "software_packageVersion": "0:3.3.0-1.oe2609",
      "software_homePage": "http://maven.apache.org/plugins/maven-source-plugin/",
      "description": "The Source Plugin creates a jar archive of the source files of the current project. The jar file is, by\ndefault, created in the project's target directory.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.maven.plugins/maven-source-plugin@3.3.0"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_1"
    }
  ]
}