{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"appstream-0.0.16.1-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/appstream-0.0.16.1-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c98f30d9-40b6-40e8-a54f-b3bc992f1f60",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-3de2b130-56cf-48bd-8204-19213a79886d",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f27eda81-f5c2-44f1-a1df-7a063cdc168c",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-acfdb933-9d87-481f-bd8c-127647031cf4",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-a8b965ab-4230-458f-8130-1e6ce30189b0",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstemmer-0-77bd25a3-1d7d-4073-a9af-b515c76e1c1c-5926fe7d-a662-4bc1-af48-a3deeaaf7635",
			"name":"libstemmer",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a2e7e946a35557b18e5123391a466a53fd097b6c4729432958d9b5b311cf58a2"
				}
			],
			"description":"\nSnowball stemming algorithms for use in Information Retrieval Snowball\nprovides access to efficient algorithms for calculating a \"stemmed\"\nform of a word.  This is a form with most of the common morphological\nendings removed; hopefully representing a common linguistic base form.\nThis is most useful in building search engines and information\nretrieval software; for example, a search with stemming enabled should\nbe able to find a document containing \"cycling\" given the query\n\"cycles\".\n\nSnowball provides algorithms for several (mainly European) languages.\nIt also provides access to the classic Porter stemming algorithm for\nEnglish: although this has been superseded by an improved algorithm,\nthe original algorithm may be of interest to information retrieval\nresearchers wishing to reproduce results of earlier experiments.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstemmer@0-13.oe2409?arch=aarch64&epoch=0&upstream=libstemmer-0-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://snowballstem.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C stemming algorithm library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-275f1072-1007-4992-8b2d-8087dfc38a99",
			"name":"libxml2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd"
				}
			],
			"description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlsoft.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library providing XML and HTML support",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195-9f107357-ff88-46e7-98e6-32bded5dd46d",
			"name":"libxmlb",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"770a8ee397887371ef829ce42e9b480a7fe5e0b68026a981e333398d2d0cdb6a"
				}
			],
			"description":"XML is slow to parse and strings inside the document cannot be memory mapped as they do not have\na trailing NUL char. The libxmlb library takes XML source, and converts it to a structured binary\nrepresentation with a deduplicated string table -- where the strings have the NULs included.\n\nThis allows an application to mmap the binary XML file, do an XPath query and return some strings\nwithout actually parsing the entire document. This is all done using (almost) zero allocations and\nno actual copying of the binary data.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxmlb@0.3.14-1.oe2409?arch=aarch64&epoch=0&upstream=libxmlb-0.3.14-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/hughsie/libxmlb",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library to help create and query binary XML blobs",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.3.14-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libyaml-0.2.5-2a8905ac-66e1-4c05-8f37-ad3dc8ee8d14-32fcf384-7611-4778-a325-73ad4ad5638e",
			"name":"libyaml",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a9ba11b379492c0a646d11cf80f7009b43c6fdaccf922f80ebe4867e1abc65b1"
				}
			],
			"description":"YAML is a data serialization format designed for human readability and\ninteraction with scripting languages.  LibYAML is a YAML parser and\nemitter written in C.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libyaml@0.2.5-7.oe2409?arch=aarch64&epoch=0&upstream=libyaml-0.2.5-7.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/yaml/libyaml",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A C library for parsing and emitting YAML",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.2.5-7.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f076f903-fdd5-4daa-862e-3f1f2f40d95c",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c98f30d9-40b6-40e8-a54f-b3bc992f1f60"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-3de2b130-56cf-48bd-8204-19213a79886d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f27eda81-f5c2-44f1-a1df-7a063cdc168c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-acfdb933-9d87-481f-bd8c-127647031cf4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-a8b965ab-4230-458f-8130-1e6ce30189b0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstemmer-0-77bd25a3-1d7d-4073-a9af-b515c76e1c1c-5926fe7d-a662-4bc1-af48-a3deeaaf7635"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-275f1072-1007-4992-8b2d-8087dfc38a99"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195-9f107357-ff88-46e7-98e6-32bded5dd46d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libyaml-0.2.5-2a8905ac-66e1-4c05-8f37-ad3dc8ee8d14-32fcf384-7611-4778-a325-73ad4ad5638e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f076f903-fdd5-4daa-862e-3f1f2f40d95c"
		}
	]
}