{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"dpkg-dev-0.1.21.22-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/dpkg-dev-0.1.21.22-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-binutils-2.41-4865db81-90b4-42dd-8269-174419b3a479-866f5d33-1caa-4436-9e43-ba3f70f6d55f",
			"name":"binutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"75a9704781962de58f857f52bd9f113182ba6135d29fee49a19c813207959cf1"
				}
			],
			"description":"Binutils is a collection of binary utilities, including ar (for\ncreating, modifying and extracting from archives), as (a family of GNU\nassemblers), gprof (for displaying call graph profile data), ld (the\nGNU linker), nm (for listing symbols from object files), objcopy (for\ncopying and translating object files), objdump (for displaying\ninformation from object files), ranlib (for generating an index for\nthe contents of an archive), readelf (for displaying detailed\ninformation about binary files), size (for listing the section sizes\nof an object or archive file), strings (for listing printable strings\nfrom files), strip (for discarding symbols), and addr2line (for\nconverting addresses to file and line).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/binutils@2.41-6.oe2409?arch=aarch64&epoch=0&upstream=binutils-2.41-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sourceware.org/binutils",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU collection of binary utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.41-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-de2009e6-0c4f-4cae-b234-1c0386d47d26",
			"name":"bzip2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"01489c08d9921a6c60c57c90b84c8d11fc02c1860f45c6f009bf535704baa64c"
				}
			],
			"description":"bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bzip2@1.0.8-8.oe2409?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.sourceware.org/bzip2/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-quality data compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.8-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-dpkg-perl-1.21.22-026745d4-f58d-41b4-a5b3-2f8f2d1527dc-34f1defd-5e83-4c6c-9e62-eb8fa4190703",
			"name":"dpkg-perl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"223e16f8e04ffdf9a94c455781bfd8328f4723b16683e649586d3e2a3c0a3918"
				}
			],
			"description":"This package contains dpdk perl modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/dpkg-perl@1.21.22-1.oe2409?arch=noarch&epoch=0&upstream=dpkg-1.21.22-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://tracker.debian.org/pkg/dpkg",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Dpkg perl modules pacakge",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.22-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-make-4.4.1-8eb14251-90cf-48c8-bb2c-c1a06f6c0dab-9b3f3653-6a78-4aab-8c09-f9f222eaffaf",
			"name":"make",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d5429bd70e213efd7683715a20528562531380ac84b6e0cffbf15902a6663afb"
				}
			],
			"description":"GNU Make is a tool which controls the generation of executables and other\nnon-source files of a program from the program's source files.\n\nMake gets its knowledge of how to build your program from a file called\nthe makefile, which lists each of the non-source files and how to compute\nit from other files. When you write a program, you should write a makefile\nfor it, so that it is possible to use Make to build and install the program.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/make@4.4.1-1.oe2409?arch=aarch64&epoch=1&upstream=make-4.4.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/make/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A tool which controls the generation of executables and non-source files of a program",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:4.4.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-patch-2.7.6-9724e09a-ed0d-4873-b8b3-c413a96219f7-fbb3359e-8dd1-4151-8a91-d70e745d3734",
			"name":"patch",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b3ec2f28b20065431a78c418fa3588a18594f21485322fa9aa02c540e069549f"
				}
			],
			"description":"Patch takes a patch file containing a difference listing produced by the\ndiff program and applies those differences to one or more original files,\nproducing patched versions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/patch@2.7.6-21.oe2409?arch=aarch64&epoch=0&upstream=patch-2.7.6-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/patch/patch.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utiliity which applies a patch file to original files.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.7.6-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-a8d8bd8c-ba6e-4884-be73-ee3e82e94154",
			"name":"xz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b0c5487eac6e3c3027f4ce0fdd9dbcb76909417529dacc4433dbc281170f1aef"
				}
			],
			"description":"XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A free general-purpose data compreession software with LZMA2 algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-lzma-compat-5.4.7-82eb95c6-956c-426a-885e-a3e09e40fe93-0b2f55bb-8fee-4777-9085-3d5b9c611e3b",
			"name":"xz-lzma-compat",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8cecc4b0eb0514e33fa8615061a2784c8f3068153be1a6bf580c9c1b68a1afc8"
				}
			],
			"description":"This package contains the compatibility binaries for older LZMA.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz-lzma-compat@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Old LZMA format compatibility binaries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-binutils-2.41-4865db81-90b4-42dd-8269-174419b3a479-866f5d33-1caa-4436-9e43-ba3f70f6d55f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-de2009e6-0c4f-4cae-b234-1c0386d47d26"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-dpkg-perl-1.21.22-026745d4-f58d-41b4-a5b3-2f8f2d1527dc-34f1defd-5e83-4c6c-9e62-eb8fa4190703"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-make-4.4.1-8eb14251-90cf-48c8-bb2c-c1a06f6c0dab-9b3f3653-6a78-4aab-8c09-f9f222eaffaf"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-patch-2.7.6-9724e09a-ed0d-4873-b8b3-c413a96219f7-fbb3359e-8dd1-4151-8a91-d70e745d3734"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-a8d8bd8c-ba6e-4884-be73-ee3e82e94154"
		},
		{
			"spdxElementId":"SPDXRef-rpm-dpkg-dev-1.21.22-71962db9-f3d7-4b30-bd99-320f41b84ddc",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-lzma-compat-5.4.7-82eb95c6-956c-426a-885e-a3e09e40fe93-0b2f55bb-8fee-4777-9085-3d5b9c611e3b"
		}
	]
}