{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "@id": "_:creationInfo_1",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd2"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd3"
      ],
      "created": "2026-07-25T17:53:36Z"
    },
    {
      "@id": "_:creationInfo_0",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd0"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd1"
      ],
      "created": "2026-07-25T17:53:36Z"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14363",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14364"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14366",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14367"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7259",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7260"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7262",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7263"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14362",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7263",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14364",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7260",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14367",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14365",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7261",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14365",
      "name": "pdfbox",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/pdfbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "A Java PDF Library",
      "software_packageVersion": "0:2.0.29-2.oe2403sp3",
      "software_homePage": "http://pdfbox.apache.org/",
      "description": "Apache PDFBox is an open source Java PDF library for working with PDF\ndocuments. This project allows creation of new PDF documents, manipulation of\nexisting documents and the ability to extract content from documents. Apache\nPDFBox also includes several command line utilities. Apache PDFBox is\npublished under the Apache License v2.0.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.pdfbox/pdfbox@2.0.29"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7261",
      "name": "fontbox",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/fontbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache FontBox",
      "software_packageVersion": "0:2.0.29-2.oe2403sp3",
      "software_homePage": "http://pdfbox.apache.org/",
      "description": "FontBox is a Java library used to obtain low level information from font\nfiles. FontBox is a subproject of Apache PDFBox.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.pdfbox/fontbox@2.0.29"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd3",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_1"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd1",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_0"
    }
  ]
}