type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-29T18:53:07Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-29T18:53:07Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-740d31a3-4080-439b-831f-8e579686198f-specv3/SPDXRef-gnrtd39187
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39188
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5856
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5857
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5845)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39314
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39315
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5859
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5860
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5845)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39226
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39217)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5914
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5915
from: java-11-openjdk-headless (SPDXRef-gnrtd5899)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5911
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5912
from: java-11-openjdk-headless (SPDXRef-gnrtd5899)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5839
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5840
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5815)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5842
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5843
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5815)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39201
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39202
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39260)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39284
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39273)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39198
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39199
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5877
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5878
from: java-11-openjdk-headless (SPDXRef-gnrtd5862)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39311
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39302)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39313
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39302)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39271
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39260)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5896
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5897
from: java-11-openjdk-headless (SPDXRef-gnrtd5880)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5893
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5894
from: java-11-openjdk-headless (SPDXRef-gnrtd5880)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39273)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39184
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39185
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39241
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39230)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39228
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39217)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39239
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39230)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39296
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39297
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39293
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39294
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39256
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39247)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5874
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5875
from: java-11-openjdk-headless (SPDXRef-gnrtd5862)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39258
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: tomcat (SPDXRef-gnrtd39247)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39212
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39213
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39209
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39210
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39317
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39318
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39216
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39217)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39272
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39273)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39244
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5899)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39246
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39247)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39299
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5815)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39298
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-beans
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39285
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-expression
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39229
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39230)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39243
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39259
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39260)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39245
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5862)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39300
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5845)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39301
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd39302)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39242
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-aop
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39215
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5880)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5878
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5915
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5857
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5860
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39185
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5912
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5875
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5894
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39318
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39210
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39199
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39315
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39294
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5843
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39188
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5897
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39213
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39297
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39202
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5840
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5841
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39312
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39211
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39186
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5895
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5876
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39270
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5858
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5913
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39240
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39283
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39200
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39316
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39257
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39227
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39295
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5880
type: software_Package
supplied by: SPDXRef-gnrtd5895
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.27.6-1.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39214
type: software_Package
supplied by: SPDXRef-gnrtd39316
name: springframework-context
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Application Context
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a complete superset of a bean factory, and adds enhanced capabilities to it, some of them more J2EE and enterprise-centric.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-context@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5845
type: software_Package
supplied by: SPDXRef-gnrtd5858
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.452.b09-2.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39302
type: software_Package
supplied by: SPDXRef-gnrtd39312
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.117-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39247
type: software_Package
supplied by: SPDXRef-gnrtd39257
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.120-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.120
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39217
type: software_Package
supplied by: SPDXRef-gnrtd39227
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.119-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.119
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39286
type: software_Package
supplied by: SPDXRef-gnrtd39295
name: springframework-expression
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Spring Expression Language (SpEL)
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a powerful expression language that supports querying and manipulating an object graph at runtime.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-expression@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39191
type: software_Package
supplied by: SPDXRef-gnrtd39200
name: springframework-beans
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Bean Factory
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The Package provides an advanced configuration mechanism capable of managing beans of any nature, using potentially any kind of storage facility.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-beans@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39178
type: software_Package
supplied by: SPDXRef-gnrtd39186
name: springframework
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: The Spring Java Application Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-core@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39273
type: software_Package
supplied by: SPDXRef-gnrtd39283
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.100-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5899
type: software_Package
supplied by: SPDXRef-gnrtd5913
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.32.9-0.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5815
type: software_Package
supplied by: SPDXRef-gnrtd5841
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.462.b08-3.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39189
type: software_Package
supplied by: SPDXRef-gnrtd39211
name: springframework-aop
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provode the Spring Aspect Oriented Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is an enabling technology,it allows the implementation of custom aspects and provides declarative transaction management without EJB.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-aop@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39230
type: software_Package
supplied by: SPDXRef-gnrtd39240
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5862
type: software_Package
supplied by: SPDXRef-gnrtd5876
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-0.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39260
type: software_Package
supplied by: SPDXRef-gnrtd39270
name: tomcat
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.115-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1