{ "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", "@graph": [ { "@id": "_:creationInfo_1", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd2" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3" ], "created": "2026-10-02T04:15:47Z" }, { "@id": "_:creationInfo_0", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd0" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1" ], "created": "2026-10-02T04:15:47Z" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17045", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16936", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16937" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16932", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16683", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16838", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16839" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16836", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16841", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16842" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16836", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62370", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62371" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62373", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62374" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16848", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16822", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22930", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22924", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16685", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4262", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4264", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17050", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16939", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16940" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16932", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22928", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22924", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16846", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16822", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16529", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16530" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16526", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16527" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17047", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17048", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62368", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16932" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62362", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62364", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62369", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62363", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16836" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62367", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22924" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62366", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16822" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62361", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62365", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16839", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0 and ASL 1.1 and MIT", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16530", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62371", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "Apache-2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16937", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "BSD-3-Clause", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16527", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16842", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0 and ASL 1.1 and MIT", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16940", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62374", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "ASL 2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16528", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16847", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16938", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17046", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16840", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62372", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17049", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16684", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22929", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17024", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17049", "name": "maven-archiver", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-archiver@3.6.2-1.oe2609?arch=noarch&epoch=0&upstream=maven-archiver-3.6.2-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Maven Archiver", "software_packageVersion": "0:3.6.2-1.oe2609", "software_homePage": "https://maven.apache.org/shared/maven-archiver/", "description": "The Maven Archiver is used by other Maven plugins\nto handle packaging", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-archiver@3.6.2" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16822", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16847", "name": "maven-filtering", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-filtering@3.3.2-1.oe2609?arch=noarch&epoch=0&upstream=maven-filtering-3.3.2-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Shared component providing resource filtering", "software_packageVersion": "0:3.3.2-1.oe2609", "software_homePage": "https://maven.apache.org/shared/maven-filtering/index.html", "description": "These Plexus components have been built from the filtering process/code in\nMaven Resources Plugin. The goal is to provide a shared component for all\nplugins that needs to filter resources.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven.shared/maven-filtering@3.3.2" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62360", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd62372", "name": "maven-war-plugin", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-war-plugin@3.5.1-1.oe2609?arch=noarch&epoch=0&upstream=maven-war-plugin-3.5.1-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Maven WAR Plugin", "software_packageVersion": "0:3.5.1-1.oe2609", "software_homePage": "http://maven.apache.org/plugins/maven-war-plugin/", "description": "Builds a Web Application Archive (WAR) file from the project output and its\ndependencies.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven.plugins/maven-war-plugin@3.5.1" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16932", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16938", "name": "maven-shared-utils", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-shared-utils@3.4.2-2.oe2609?arch=noarch&epoch=0&upstream=maven-shared-utils-3.4.2-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "The functional replacement of plexus-utils in maven", "software_packageVersion": "0:3.4.2-2.oe2609", "software_homePage": "https://maven.apache.org/shared/maven-shared-utils", "description": "This package can be the functional replacement of plexus-utils in Maven.\nAt the same time, the package has many hightlights, such as: a lot of methods\ngot cleaned up, generics got added and a lot of unused code dropped.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22924", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd22929", "name": "maven-mapping", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-mapping@3.0.0-2.oe2609?arch=noarch&epoch=0&upstream=maven-mapping-3.0.0-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Apache Maven Mapping", "software_packageVersion": "0:3.0.0-2.oe2609", "software_homePage": "https://maven.apache.org/shared/maven-mapping/", "description": "Maven shared component that implements file name mapping.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven.shared/maven-mapping@3.0.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263", "software_downloadLocation": "NOASSERTION", "summary": "Java packages filesystem layout", "software_packageVersion": "0:6.2.0-1.oe2609", "software_homePage": "https://github.com/fedora-java/javapackages", "description": "This package provides some basic directories into which Java packages\ninstall their content.", "name": "javapackages-filesystem", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/javapackages-filesystem@6.2.0-1.oe2609?arch=noarch&epoch=0&upstream=javapackages-tools-6.2.0-1.oe2609.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17028", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd17046", "name": "plexus-archiver", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/plexus-archiver@4.10.0-1.oe2609?arch=noarch&epoch=0&upstream=plexus-archiver-4.10.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Plexus Archiver Component", "software_packageVersion": "0:4.10.0-1.oe2609", "software_homePage": "https://codehaus-plexus.github.io/plexus-archiver", "description": "The Plexus project seeks to create end-to-end developer tools for\nwriting applications. At the core is the container, which can be\nembedded or for a full scale application server. There are many\nreusable components for hibernate, form processing, jndi, i18n,\nvelocity, etc. Plexus also includes an application server which\nis like a J2EE application server, without all the baggage.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16836", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16840", "name": "plexus-interpolation", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/plexus-interpolation@1.27-2.oe2609?arch=noarch&epoch=0&upstream=plexus-interpolation-1.27-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Plexus Interpolation API", "software_packageVersion": "0:1.27-2.oe2609", "software_homePage": "https://github.com/codehaus-plexus/plexus-interpolation", "description": "Plexus interpolator is the outgrowth of multiple iterations of development\nfocused on providing a more modular, flexible interpolation framework for\nthe expression language style commonly seen in Maven, Plexus, and other\nrelated projects.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16524", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16528", "name": "plexus-utils", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/plexus-utils@3.5.1-1.oe2609?arch=noarch&epoch=0&upstream=plexus-utils-3.5.1-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Plexus Common Utilities", "software_packageVersion": "0:3.5.1-1.oe2609", "software_homePage": "https://codehaus-plexus.github.io/plexus-utils/", "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/plexus/plexus-utils@3.5.1" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16684", "name": "apache-commons-io", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-io@2.20.0-1.oe2609?arch=noarch&epoch=1&upstream=apache-commons-io-2.20.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Utilities to assist with developing IO functionality", "software_packageVersion": "1:2.20.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-io/", "description": "Commons-IO contains utility classes, stream implementations,\nfile filters, and endian classes. It is a library of utilities\nto assist with developing IO functionality.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-io@2.20.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/commons-io/commons-io@2.20.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_1" } ] }