{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"appstream-compose-0.0.16.1-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/appstream-compose-0.0.16.1-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40-9f1cf132-6431-4a4b-b682-d27aea79ad89",
			"name":"appstream",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7ce73974c8a8f2c362f5029f4b9de6a899696917a64ca8b77d5c55efb63363b1"
				}
			],
			"description":"AppStream makes it easy to access application information from the\nAppStream database over a nice GObject-based interface.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/appstream@0.16.1-1.oe2409?arch=aarch64&epoch=0&upstream=appstream-0.16.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/ximion/appstream",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utilities to generate, maintain and access the AppStream database",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.16.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-b151ac79-38ac-4751-af77-d017be84c2e6",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fontconfig-2.15.0-2b0c4374-97af-4dbb-8448-ce490bacd364-84d42021-f00f-4a99-a2d5-e1a2ea282c30",
			"name":"fontconfig",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a1a8a3ef4f9ab7b04afccd6b130e81b2a11100c8690a8b60a8cbfe68001fc2b7"
				}
			],
			"description":"Fontconfig  provide different font according to requirements specified by applications,discover new fonts when installed automatically\nbe used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fontconfig@2.15.0-1.oe2409?arch=aarch64&epoch=0&upstream=fontconfig-2.15.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://fontconfig.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Fontconfig is a library for configuring and customizing font access",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-cd74304f-0079-45a2-8c1a-dfe61cb0f024",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-1c42f6c6-e6af-4d92-8049-f2a05e68f044",
			"name":"gdk-pixbuf2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1628aee3a1b47ecdac1b95510d5bd8b778b348476404dd504d754ee5a0d4eba1"
				}
			],
			"description":"gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gdk-pixbuf2@2.42.10-2.oe2409?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.gnome.org/GNOME/gdk-pixbuf",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"gdk is a multi-platform toolkit for creating graphical user interfaces.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.42.10-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-0dfc887b-00fd-4919-a956-8a22b053353e",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-fde56531-ac4b-4ae4-b175-f74c882631d1",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-librsvg2-2.57.92-dcd998f6-ae90-4489-b0be-95b46589072e-ce512f3d-9752-4ae3-a34d-4f7359c550bb",
			"name":"librsvg2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1bbebb0ceda47a7a8d0655db01078b00f2d5522d5a3255be89c9ecdc1c7d0e30"
				}
			],
			"description":"An SVG library based on cairo.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/librsvg2@2.57.92-3.oe2409?arch=aarch64&epoch=0&upstream=librsvg2-2.57.92-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/LibRsvg",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An SVG library based on cairo",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.57.92-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libyaml-0.2.5-2a8905ac-66e1-4c05-8f37-ad3dc8ee8d14-73b382ac-28d4-41dc-9418-a248c062207e",
			"name":"libyaml",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a9ba11b379492c0a646d11cf80f7009b43c6fdaccf922f80ebe4867e1abc65b1"
				}
			],
			"description":"YAML is a data serialization format designed for human readability and\ninteraction with scripting languages.  LibYAML is a YAML parser and\nemitter written in C.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libyaml@0.2.5-7.oe2409?arch=aarch64&epoch=0&upstream=libyaml-0.2.5-7.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/yaml/libyaml",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A C library for parsing and emitting YAML",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.2.5-7.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-4a4667c7-a347-47ef-9ef8-51aac6fb34c7",
			"name":"pango",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d0e418b3de79e6ede6bbcc86497334d2a2864bd7f39f616fe2dc1e7a599750a6"
				}
			],
			"description":"Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pango@1.52.1-1.oe2409?arch=aarch64&epoch=0&upstream=pango-1.52.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pango.gnome.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System for layout and rendering of internationalized text",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.52.1-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40-9f1cf132-6431-4a4b-b682-d27aea79ad89"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-b151ac79-38ac-4751-af77-d017be84c2e6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fontconfig-2.15.0-2b0c4374-97af-4dbb-8448-ce490bacd364-84d42021-f00f-4a99-a2d5-e1a2ea282c30"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-cd74304f-0079-45a2-8c1a-dfe61cb0f024"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-1c42f6c6-e6af-4d92-8049-f2a05e68f044"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-0dfc887b-00fd-4919-a956-8a22b053353e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-fde56531-ac4b-4ae4-b175-f74c882631d1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-librsvg2-2.57.92-dcd998f6-ae90-4489-b0be-95b46589072e-ce512f3d-9752-4ae3-a34d-4f7359c550bb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libyaml-0.2.5-2a8905ac-66e1-4c05-8f37-ad3dc8ee8d14-73b382ac-28d4-41dc-9418-a248c062207e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-appstream-compose-0.16.1-5f2345e3-ebe4-494d-b05d-0e864efba486",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-4a4667c7-a347-47ef-9ef8-51aac6fb34c7"
		}
	]
}