{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"atune-collector-0.1.3.0-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/atune-collector-0.1.3.0-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c01ea18d-fc3a-4c31-a8c3-b1adb76b37d8",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-91dc2e46-25c3-4c33-ae3f-13f50461d4e9",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-dict2xml-1.7.5-bae64877-f01f-49d7-846f-1be6606e31ec-25ccf388-a37e-41b6-a044-bdb899a9ee1f",
			"name":"python3-dict2xml",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"84390d945faba0aa52ed3f9de66532cc515d63a2334502a5d4501bf223e7316d"
				}
			],
			"description":"Super Simple utility to convert a python dictionary into an xml string.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-dict2xml@1.7.5-1.oe2409?arch=noarch&epoch=0&upstream=python-dict2xml-1.7.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://github.com/delfick/python-dict2xml",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Super Simple utility to convert a python dictionary into an xml string",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.7.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-werkzeug-2.2.3-00464cf7-dc6f-446d-9d15-5013e0b385f9-6f5eac08-d802-411c-8a45-25b531d9f040",
			"name":"python3-werkzeug",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b8ef83cd85222860f5e8c63c9bbb4b2591927496ff656ac6415f2465fb1e9b5f"
				}
			],
			"description":"*werkzeug* German noun: \"tool\". Etymology: *werk* (\"work\"), *zeug* (\"stuff\")\nWerkzeug is a comprehensive `WSGI`_ web application library. It began as\na simple collection of various utilities for WSGI applications and has\nbecome one of the most advanced WSGI utility libraries.\nIt includes:\n-   An interactive debugger that allows inspecting stack traces and\n    source code in the browser with an interactive interpreter for any\n    frame in the stack.\n-   A full-featured request object with objects to interact with\n    headers, query args, form data, files, and cookies.\n-   A response object that can wrap other WSGI applications and handle\n    streaming data.\n-   A routing system for matching URLs to endpoints and generating URLs\n    for endpoints, with an extensible system for capturing variables\n    from URLs.\n-   HTTP utilities to handle entity tags, cache control, dates, user\n    agents, cookies, files, and more.\n-   A threaded WSGI server for use while developing applications\n    locally.\n-   A test client for simulating HTTP requests during testing without\n    requiring running a server.\nWerkzeug doesn't enforce any dependencies. It is up to the developer to\nchoose a template engine, database adapter, and even how to handle\nrequests. It can be used to build all sorts of end user applications\nsuch as blogs, wikis, or bulletin boards.\n`Flask`_ wraps Werkzeug, using it to handle the details of WSGI while\nproviding more structure and patterns for defining powerful\napplications.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-werkzeug@2.2.3-2.oe2409?arch=noarch&epoch=0&upstream=python-werkzeug-2.2.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://palletsprojects.com/p/werkzeug/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The comprehensive WSGI web application library.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.2.3-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-atune-collector-1.3.0-581daa90-debb-4e96-a752-fa9fcb8257bd",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c01ea18d-fc3a-4c31-a8c3-b1adb76b37d8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-atune-collector-1.3.0-581daa90-debb-4e96-a752-fa9fcb8257bd",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-91dc2e46-25c3-4c33-ae3f-13f50461d4e9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-atune-collector-1.3.0-581daa90-debb-4e96-a752-fa9fcb8257bd",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-dict2xml-1.7.5-bae64877-f01f-49d7-846f-1be6606e31ec-25ccf388-a37e-41b6-a044-bdb899a9ee1f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-atune-collector-1.3.0-581daa90-debb-4e96-a752-fa9fcb8257bd",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-werkzeug-2.2.3-00464cf7-dc6f-446d-9d15-5013e0b385f9-6f5eac08-d802-411c-8a45-25b531d9f040"
		}
	]
}