{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "@id": "_:creationInfo_0",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd0"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/additionalToolSPDXRef-gnrtd1"
      ],
      "created": "2026-07-18T18:43:00Z"
    },
    {
      "@id": "_:creationInfo_1",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd2"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/additionalToolSPDXRef-gnrtd3"
      ],
      "created": "2026-07-18T18:43:00Z"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35796",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35788",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35811",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35803",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35774",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35764",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35798",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35788",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35761",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35751",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38563",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35759",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35751",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38565",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35784",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35776",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35786",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35776",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35772",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35764",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35813",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35803",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38559",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35776"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38562",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35751"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38560",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35803"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38558",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35788"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38561",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35764"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd66",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "Apache-2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35773",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38564",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35760",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35812",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35785",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35797",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35751",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35760",
      "name": "tomcat",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat@9.0.117-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.117-1.oe2403sp1.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "software_packageVersion": "1:9.0.117-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/559722d1c60a7ac3b23552f9d6099d292fe076f5@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/28e048e5656a9aa33282d1645ebd59a6fdc5e41f@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35764",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35773",
      "name": "tomcat",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat@9.0.118-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.118-1.oe2403sp1.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "software_packageVersion": "1:9.0.118-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/567f2d3adb03a6ce001282be08f79eb56b72a7bc@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/5793d02841f8a66941b3a165379e64180e8de8b5@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35803",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35812",
      "name": "tomcat",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat@9.0.119-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.119-1.oe2403sp1.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "software_packageVersion": "1:9.0.119-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/bdb713c26c89e6e9d77cb31447545d39459f27e1@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.119"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/79f3645aeb7a9fbcf073c868a839f0d3f06075fc@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.119"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38557",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd38564",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Documents for tomcat",
      "software_packageVersion": "1:9.0.100-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Man pages and other related documents for tomcat.",
      "name": "tomcat-help",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat-help@9.0.100-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.100-1.oe2403sp1.src.rpm",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35776",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35785",
      "name": "tomcat",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat@9.0.100-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.100-1.oe2403sp1.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "software_packageVersion": "1:9.0.100-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/4b0dadfc5f86bc5fc09488b477cce66a496ab476@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/c3fb1a71d9ae3b448669a24b9aa881618595e001@1.0.0"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35788",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/SPDXRef-gnrtd35797",
      "name": "tomcat",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/750d2b47baac9c5cbb3ae49bbf8c4ff7bf44796813ecb397af35aa5323864a72-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/tomcat@9.0.115-1.oe2403sp1?arch=noarch&epoch=1&upstream=tomcat-9.0.115-1.oe2403sp1.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "software_packageVersion": "1:9.0.115-1.oe2403sp1",
      "software_homePage": "http://tomcat.apache.org/",
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/ab60294f6a2071549d52d755b27e77409c1e6d26@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum",
          "locator": [
            "pkg:maven/sha1/31574babb2bb1152176c4bdc214bfc2404274433@1.0.0"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-util@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115"
          ],
          "externalRefType": "other"
        },
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/additionalToolSPDXRef-gnrtd1",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-9ac67789-38f2-4e31-99bd-a9ab33db2a2c-specv3/additionalToolSPDXRef-gnrtd3",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_1"
    }
  ]
}