{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "@id": "_:creationInfo_0",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd0"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/additionalToolSPDXRef-gnrtd1"
      ],
      "created": "2026-07-25T17:56:39Z"
    },
    {
      "@id": "_:creationInfo_1",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd2"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/additionalToolSPDXRef-gnrtd3"
      ],
      "created": "2026-07-25T17:56:39Z"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12392",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd81"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12391",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12415",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd81"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12413",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12394",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd81"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12391",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12417",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd81"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12413",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12414",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12391"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12413",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd81",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "Apache-2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12416",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12393",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12413",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12416",
      "name": "log4j-slf4j",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/log4j-slf4j@2.17.2-2.oe2403sp3?arch=noarch&epoch=0&upstream=log4j-2.17.2-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Binding between LOG4J 2 API and SLF4J",
      "software_packageVersion": "0:2.17.2-2.oe2403sp3",
      "software_homePage": "http://logging.apache.org/log4j",
      "description": "Binding between LOG4J 2 API and SLF4J.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12391",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/SPDXRef-gnrtd12393",
      "name": "log4j",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/log4j@2.17.2-2.oe2403sp3?arch=noarch&epoch=0&upstream=log4j-2.17.2-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Java logging package",
      "software_packageVersion": "0:2.17.2-2.oe2403sp3",
      "software_homePage": "http://logging.apache.org/log4j",
      "description": "Log4j is a tool to help the programmer output log statements to a\nvariety of output targets.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/log4j/log4j@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-docker@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-to-jul@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-osgi@2.17.2"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/additionalToolSPDXRef-gnrtd1",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-000d9e7d-801b-4e1e-866c-204f6140f949-specv3/additionalToolSPDXRef-gnrtd3",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_1"
    }
  ]
}