{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"audit-libs-1.3.1.2-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/audit-libs-1.3.1.2-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-04ea930c-c1e0-42c8-be6a-ee9b9eb93f60",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcap-ng-0.8.3-5b6772fc-66d6-4702-bfac-d04925586c09-f489eab1-49fd-47cd-ac5b-7f22cb1ab79d",
			"name":"libcap-ng",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"396adc177c95ef50e6e4766054a5ed8f9bda2ae0efd2307fa7bff5f39a29f58d"
				}
			],
			"description":"The libcap-ng library is intended to make programming with posix\ncapabilities much easier than the traditional libcap library.It\nincludes utilities that can analyse all currently running applications\nand print out any capabilities and whether or not it has an open\nended bounding set.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcap-ng@0.8.3-2.oe2409?arch=aarch64&epoch=0&upstream=libcap-ng-0.8.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://people.redhat.com/sgrubb/libcap-ng",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libcap-ng is a library used for posix capabilities programming",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.8.3-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-audit-libs-3.1.2-c812cf19-ea1a-4683-aa53-e11301df08b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-04ea930c-c1e0-42c8-be6a-ee9b9eb93f60"
		},
		{
			"spdxElementId":"SPDXRef-rpm-audit-libs-3.1.2-c812cf19-ea1a-4683-aa53-e11301df08b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcap-ng-0.8.3-5b6772fc-66d6-4702-bfac-d04925586c09-f489eab1-49fd-47cd-ac5b-7f22cb1ab79d"
		}
	]
}