{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"DCF-0.5.0.1-7.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/DCF-0.5.0.1-7.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-31c3b51c-dc9b-4019-9693-4f71e7428a4b",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cjson-1.7.15-5658fc06-29fe-4d6f-b795-7c4f85a3c3fc-201f12ac-f464-49c7-94c4-19656668c2bc",
			"name":"cjson",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"df32eb344b0c90ee5cf51dd6e5ec2ca205340061063e50103efeae7e89fd1b86"
				}
			],
			"description":"cJSON aims to be the dumbest possible parser that you can get your job\ndone with. It's a single file of C, and a single header file.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cjson@1.7.15-9.oe2409?arch=aarch64&epoch=0&upstream=cjson-1.7.15-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/DaveGamble/cJSON",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Ultralightweight JSON parser in ANSI C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.7.15-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-d67a1e04-fa56-40a3-8726-bd5043e35b6f",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-ca4ffa16-d56d-4b9c-bae4-d133ebb8daf9",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libboundscheck-v1.1.11-f0882625-6b55-4ce1-a5df-657a57613061-21d06905-64c0-426a-a63a-0b4a8015203b",
			"name":"libboundscheck",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"43dd0239a30d760b8702d2c52f94ed2d7eb0fee528e65941089970493f235501"
				}
			],
			"description":"libboundscheck provides a set of functions of\nthe common memory/string operation classes.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libboundscheck@v1.1.11-6.oe2409?arch=aarch64&epoch=0&upstream=libboundscheck-v1.1.11-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitee.com/openeuler/libboundscheck",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Enhanced safety functions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:v1.1.11-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lz4-1.10.0-904beed5-b6cc-4173-a807-04f8c7152e00-4f7c63a4-9345-4d98-99bd-3145038126ca",
			"name":"lz4",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"41eb5ae9f53383efd2357f3234c28e68b5045ab5b7d63d32e1966b5f67435bcb"
				}
			],
			"description":"LZ4 is lossless compression algorithm, providing compression speed > 500 MB/s per\ncore (>0.15 Bytes/cycle). It features an extremely fast decoder, with speed in\nmultiple GB/s per core (~1 Byte/cycle). A high compression derivative, called\nLZ4_HC, is available, trading customizable CPU time for compression ratio.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lz4@1.10.0-1.oe2409?arch=aarch64&epoch=0&upstream=lz4-1.10.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://lz4.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extremely fast compression algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.10.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-7fec1f64-9686-44c9-97ee-ee7bc8f27b6f",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-36b305a2-9876-481a-8944-c5775740fa37",
			"name":"zstd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"540889791e83a2032aa07967ce6d2791f3353208081a165a351dd65208d2bb9d"
				}
			],
			"description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zstd@1.5.6-1.oe2409?arch=aarch64&epoch=0&upstream=zstd-1.5.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/facebook/zstd",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A fast lossless compression algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5.6-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-31c3b51c-dc9b-4019-9693-4f71e7428a4b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cjson-1.7.15-5658fc06-29fe-4d6f-b795-7c4f85a3c3fc-201f12ac-f464-49c7-94c4-19656668c2bc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-d67a1e04-fa56-40a3-8726-bd5043e35b6f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-ca4ffa16-d56d-4b9c-bae4-d133ebb8daf9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libboundscheck-v1.1.11-f0882625-6b55-4ce1-a5df-657a57613061-21d06905-64c0-426a-a63a-0b4a8015203b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lz4-1.10.0-904beed5-b6cc-4173-a807-04f8c7152e00-4f7c63a4-9345-4d98-99bd-3145038126ca"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-7fec1f64-9686-44c9-97ee-ee7bc8f27b6f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-DCF-5.0.1-72c49c1f-d7c6-4d9b-9c55-8ffbc785429b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-36b305a2-9876-481a-8944-c5775740fa37"
		}
	]
}