{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"cmake-0.3.27.9-4.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/cmake-0.3.27.9-4.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-cmake-data-3.27.9-5ff8eac6-ffd8-4f53-a06e-c52aef67ef09-0c77317c-9bbd-4f9b-91b2-0c01797b68b9",
			"name":"cmake-data",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"932730a5ef3788ed3e54c2c0eeca396d4e2eadb6e0a59beb9a4cb515026ab59c"
				}
			],
			"description":"This package contains common data-files for cmake.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cmake-data@3.27.9-4.oe2409?arch=noarch&epoch=0&upstream=cmake-3.27.9-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.cmake.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Common data-files for cmake",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.27.9-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cmake-filesystem-3.27.9-31b868ab-db95-4566-a7d2-cd648b2bea59-b7532d10-6ded-4b19-9ac7-61a662c6a5fa",
			"name":"cmake-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"65dc7ee7a2a42e7e46bb3530a24a6c382c09d3d7a6cf9c15e7065f6e8614ef6a"
				}
			],
			"description":"This package owns all directories used by CMake modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cmake-filesystem@3.27.9-4.oe2409?arch=aarch64&epoch=0&upstream=cmake-3.27.9-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.cmake.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Directories used by CMake modules",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.27.9-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cmake-rpm-macros-3.27.9-7783af77-6280-49f1-b545-e162227dace4-9db30758-c8e6-4113-ae4a-14d78545975d",
			"name":"cmake-rpm-macros",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"426374ae00ddf218029ccff54d6443d3b71de04652e509f3a66974a1cf3ce0eb"
				}
			],
			"description":"This package contains common RPM macros for cmake.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cmake-rpm-macros@3.27.9-4.oe2409?arch=noarch&epoch=0&upstream=cmake-3.27.9-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.cmake.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Common RPM macros for cmake",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.27.9-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-5da9d75e-961f-4163-a577-a3471342249b",
			"name":"expat",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3789391c6958f4728e77e0394317dea13115936981c16b4cac36a15daeebe143"
				}
			],
			"description":"expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/expat@2.6.2-1.oe2409?arch=aarch64&epoch=0&upstream=expat-2.6.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://libexpat.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An XML parser library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-5f1d3800-8892-4e6b-bf76-0f0a538d6088",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jsoncpp-1.9.5-ec2bafa4-88bc-4fa9-9b04-71441a9c46d3-3303abd9-b209-4ead-b2c4-669ca521e4ff",
			"name":"jsoncpp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4322ad220dfdedcdb41dd09a6abe24f18606768cf5b764b5c3cde680922d0d2c"
				}
			],
			"description":"JsonCpp is a C++ library that allows manipulating JSON values,\nincluding serialization and deserialization to and from strings.\nIt can also preserve existing comment in unserialization/serialization steps,\nmaking it a convenient format to store user input files.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jsoncpp@1.9.5-5.oe2409?arch=aarch64&epoch=0&upstream=jsoncpp-1.9.5-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/open-source-parsers/jsoncpp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JSON C++ library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.9.5-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-58f126be-52c3-4d24-b002-5d7a1cff49a2",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-f2ee44c5-70b0-435b-90ec-fa0fadf32b92",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-f793c744-9b65-4fa0-a152-bda5dee78f10",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-9be63942-63e8-4550-b048-b6268d0cb0f2",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libuv-1.47.0-f15dda32-fd08-4298-975e-c61ab5101891-2a793d79-6b2f-4135-ada2-656e8a8b7085",
			"name":"libuv",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"70f836b25b91c541c2f29b0d0fc44db858d2a20cec2ede5a5fef91f254c633fe"
				}
			],
			"description":"libuv is a multi-platform support library with a focus on asynchronous I/O.\nIt was primarily developed for use by Node.js, but it’s also used by Luvit,\nJulia, pyuv, and others.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libuv@1.47.0-2.oe2409?arch=aarch64&epoch=1&upstream=libuv-1.47.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://libuv.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A multi-platform support library with a focus on asynchronous I/O",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.47.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-8fe3a8b8-cbaf-46ff-aef6-2a979bf097b7",
			"name":"ncurses-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"36fe3ab09be75524eb8fddf9afa3581a65f9f6c643441af42f5938f7ba45e9ce"
				}
			],
			"description":"Libraries for ncurses.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ncurses-libs@6.4-8.oe2409?arch=aarch64&epoch=0&upstream=ncurses-6.4-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://invisible-island.net/ncurses/ncurses.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for ncurses",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.4-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-a50cf1c3-cc59-4b7d-8304-3040ca653e0b",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cmake-data-3.27.9-5ff8eac6-ffd8-4f53-a06e-c52aef67ef09-0c77317c-9bbd-4f9b-91b2-0c01797b68b9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cmake-filesystem-3.27.9-31b868ab-db95-4566-a7d2-cd648b2bea59-b7532d10-6ded-4b19-9ac7-61a662c6a5fa"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cmake-rpm-macros-3.27.9-7783af77-6280-49f1-b545-e162227dace4-9db30758-c8e6-4113-ae4a-14d78545975d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-5da9d75e-961f-4163-a577-a3471342249b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-5f1d3800-8892-4e6b-bf76-0f0a538d6088"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jsoncpp-1.9.5-ec2bafa4-88bc-4fa9-9b04-71441a9c46d3-3303abd9-b209-4ead-b2c4-669ca521e4ff"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-58f126be-52c3-4d24-b002-5d7a1cff49a2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-f2ee44c5-70b0-435b-90ec-fa0fadf32b92"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-f793c744-9b65-4fa0-a152-bda5dee78f10"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-9be63942-63e8-4550-b048-b6268d0cb0f2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libuv-1.47.0-f15dda32-fd08-4298-975e-c61ab5101891-2a793d79-6b2f-4135-ada2-656e8a8b7085"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-8fe3a8b8-cbaf-46ff-aef6-2a979bf097b7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cmake-3.27.9-5cbd7347-07a7-43db-b693-0297197b8d4b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-a50cf1c3-cc59-4b7d-8304-3040ca653e0b"
		}
	]
}