{ "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", "@graph": [ { "@id": "_:creationInfo_1", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd2" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3" ], "created": "2026-10-02T04:15:47Z" }, { "@id": "_:creationInfo_0", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd0" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1" ], "created": "2026-10-02T04:15:47Z" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16683", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91571", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd25" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16257", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16258" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16245", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16260", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16261" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16245", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16685", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16988", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16989" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16861", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16166", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16164", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16114", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16112", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4262", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4264", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16168", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16164", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91569", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd25" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16991", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16992" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16861", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16116", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16112", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91565", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91568", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16112" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91566", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16164" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91564", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16861" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91563", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16245" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91567", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16992", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "(MIT AND Apache-2.0)", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd25", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "MIT", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16989", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "(MIT AND Apache-2.0)", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16261", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "(W3C AND Apache-2.0)", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd158", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "Apache-2.0", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd79", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "BSD-3-Clause", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16258", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "(W3C AND Apache-2.0)", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16259", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16167", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16115", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16684", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16990", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91570", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16164", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16167", "name": "apache-commons-lang3", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-lang3@3.20.0-1.oe2609?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.20.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Provides a host of helper utilities for the java.lang API", "software_packageVersion": "0:3.20.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-lang/", "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nThe Commons Lang Component provides a host of helper utilities for the\njava.lang API, notably String manipulation methods, basic numerical\nmethods, object reflection, creation and serialization, and System\nproperties. Additionally it contains an inheritable enum type, an\nexception structure that supports multiple types of nested-Exceptions\nand a series of utilities dedicated to help with building methods, such\nas hashCode, toString and equals.\n\nWith version of commons-lang 3.x, developers decided to change API and\ntherefore created differently named artifact and jar files. This is\nthe new version, while apache-commons-lang is the compatibility\npackage.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-lang3@3.20.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16245", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16259", "name": "xerces-j2", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/xerces-j2@2.12.2-2.oe2609?arch=noarch&epoch=0&upstream=xerces-j2-2.12.2-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Java XML parser", "software_packageVersion": "0:2.12.2-2.oe2609", "software_homePage": "http://xerces.apache.org/xerces2-j/", "description": "Welcome to the future! Xerces2 is the next generation of high\nperformance, fully compliant XML parsers in the Apache Xerces family.\nThis new version of Xerces introduces the Xerces Native Interface (XNI),\na complete framework for building parser components and configurations\nthat is extremely modular and easy to program.\n\nThe Apache Xerces2 parser is the reference implementation of XNI but\nother parser components, configurations, and parsers can be written\nusing the Xerces Native Interface. For complete design and\nimplementation documents, refer to the XNI Manual.\n\nXerces 2 is a fully conforming XML Schema processor. For more\ninformation, refer to the XML Schema page.\n\nXerces 2 also provides a partial implementation of Document Object Model\nLevel 3 Core, Load and Save and Abstract Schemas [deprecated] Working\nDrafts. For more information, refer to the DOM Level 3 Implementation\npage.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/apache/xerces-j2@2.11.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/xerces/xmlParserAPIs@2.11.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/xerces/xerces@2.11.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/xerces/xercesImpl@2.11.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4261", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd4263", "software_downloadLocation": "NOASSERTION", "summary": "Java packages filesystem layout", "software_packageVersion": "0:6.2.0-1.oe2609", "software_homePage": "https://github.com/fedora-java/javapackages", "description": "This package provides some basic directories into which Java packages\ninstall their content.", "name": "javapackages-filesystem", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/javapackages-filesystem@6.2.0-1.oe2609?arch=noarch&epoch=0&upstream=javapackages-tools-6.2.0-1.oe2609.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16861", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16990", "name": "maven-lib", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/maven-lib@3.9.9-2.oe2609?arch=noarch&epoch=1&upstream=maven-3.9.9-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Core part of Maven", "software_packageVersion": "1:3.9.9-2.oe2609", "software_homePage": "https://maven.apache.org/", "description": "Core part of Apache Maven that can be used as a library.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-core@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-builder-support@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-model@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-settings@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-aether-provider@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-slf4j-provider@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-model-builder@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-artifact@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-embedder@3.9.9" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.maven/maven-compat@3.9.9" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91562", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd91570", "name": "replacer", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/replacer@1.6-3.oe2609?arch=noarch&epoch=0&upstream=replacer-1.6-3.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Replacer Maven Mojo", "software_packageVersion": "0:1.6-3.oe2609", "software_homePage": "https://github.com/beiliubei/maven-replacer-plugin", "description": "Maven plugin to replace tokens in a given file with a value.\nThis plugin is also used to automatically generating PackageVersion.java\nin the FasterXML.com project.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/com.google.code.maven-replacer-plugin/replacer@1.6.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/com.google.code.maven-replacer-plugin/maven-replacer-plugin@1.6.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16681", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16684", "name": "apache-commons-io", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/apache-commons-io@2.20.0-1.oe2609?arch=noarch&epoch=1&upstream=apache-commons-io-2.20.0-1.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Utilities to assist with developing IO functionality", "software_packageVersion": "1:2.20.0-1.oe2609", "software_homePage": "https://commons.apache.org/proper/commons-io/", "description": "Commons-IO contains utility classes, stream implementations,\nfile filters, and endian classes. It is a library of utilities\nto assist with developing IO functionality.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.commons/commons-io@2.20.0" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/commons-io/commons-io@2.20.0" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16112", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/SPDXRef-gnrtd16115", "name": "ant-lib", "software_sourceInfo": "acquired package info from repodata DB: repodata/19d54a93ffbada0d8891adcbefe41a882ee7f08ec9d32c6bee1353a910c81e32-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/ant-lib@1.10.15-2.oe2609?arch=noarch&epoch=0&upstream=ant-1.10.15-2.oe2609.src.rpm", "software_downloadLocation": "NOASSERTION", "summary": "Core part of ant", "software_packageVersion": "0:1.10.15-2.oe2609", "software_homePage": "https://ant.apache.org/", "description": "Core part of Apache Ant that can be used as a library.", "externalRef": [ { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.ant/ant-nodeps@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.ant/ant@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/ant/ant@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/apache/ant@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.ant/ant-launcher@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/ant/ant-launcher@1.10.15" ], "externalRefType": "other" }, { "type": "ExternalRef", "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl", "locator": [ "pkg:maven/org.apache.ant/ant-bootstrap@1.10.15" ], "externalRefType": "other" } ], "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd1", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-26.09/everything/x86_64-d20ca2c2-3788-4a6e-b0ed-9fccfc716ab9-specv3/additionalToolSPDXRef-gnrtd3", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_1" } ] }