{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"envmaker-0.3.2.0-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/envmaker-0.3.2.0-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-6a16434d-3970-4a11-bfef-2c3b9c684d69",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-createrepo-c-1.1.4-e3cf6046-3a95-486e-8001-974a19161c10-7dbc2a8a-0335-416c-aec1-50a2fa2a2916",
			"name":"createrepo_c",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4faf30907f435d3a760ab15ceccb53ab3f3eda746f306734e9e4cc5856f023b6"
				}
			],
			"description":"C implementation of Createrepo.\nA set of utilities (createrepo_c, mergerepo_c, modifyrepo_c)\nfor generating a common metadata repository from a directory of\nrpm packages and maintaining it.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/createrepo_c@1.1.4-1.oe2409?arch=aarch64&epoch=0&upstream=createrepo_c-1.1.4-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/createrepo_c",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Creates a common metadata repository",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1.4-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-dnf-plugins-core-4.3.1-8bdb1dae-f0a8-4405-ad9e-5161df9779d1-a0ddc096-a642-46db-915a-f4b7cec90d34",
			"name":"dnf-plugins-core",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8e3b4666bb88843a039587a93253dfccae71fe154bbbafa4ace630768738f72f"
				}
			],
			"description":"Core Plugins for DNF. This package enhances DNF with builddep, config-manager,\ncopr, debug, debuginfo-install, download, needs-restarting, groups-manager, repoclosure,\nrepograph, repomanage, reposync, changelog and repodiff commands. Additionally\nprovides generate_completion_cache passive plugin.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/dnf-plugins-core@4.3.1-4.oe2409?arch=noarch&epoch=0&upstream=dnf-plugins-core-4.3.1-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/dnf-plugins-core",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Core Plugins for DNF",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.3.1-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-file-5.45-9179c84c-2d9b-482a-a784-b34de00ff853-4418e349-4fa3-46a1-9c2a-85ec2f42149b",
			"name":"file",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79fd476c8fb4dd1f10dc0f3e47165225cb87d49f4df184660c9947d7a80f7dd7"
				}
			],
			"description":"The program checks to see if the file is empty,or if\nits some sort of special file. Any known file types\nappropriate to the system you are running on (sockets,\nsymbolic links, or named pipes (FIFOs) on those systems\nthat implement them) are intuited if they are defined\nin the system header file",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/file@5.45-1.oe2409?arch=aarch64&epoch=0&upstream=file-5.45-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.darwinsys.com/file/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A tool to identify the type of a particular file type",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.45-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-genisoimage-1.1.11-905a1b1c-3063-4335-baeb-7855e135b800-cd6474bb-a51b-4164-90ac-424d59b05756",
			"name":"genisoimage",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"bfeb8a853603be5ff3a634cc891bf32f42b421a649bffe2c681d899ed4ef8e66"
				}
			],
			"description":"Genisoimage packages for cdrkit",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/genisoimage@1.1.11-51.oe2409?arch=aarch64&epoch=0&upstream=cdrkit-1.1.11-51.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cdrkit.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"genisoimage packages for cdrkit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1.11-51.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-d9e57218-3889-41f2-8fb2-ca5c09ac60b6",
			"name":"grep",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c10c765f975815976eb3b2bbbc51688940c88bdb4cb1722357cc674573bd93e7"
				}
			],
			"description":"Grep searches one or more input files for lines containing a match to\na specified pattern. By default, Grep outputs the matching lines.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/grep@3.11-3.oe2409?arch=aarch64&epoch=0&upstream=grep-3.11-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/grep",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A string search utility",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.11-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-isomd5sum-1.2.5-49bf8b5f-2699-4b89-ab2b-20c198f1eadf-e9b4cd78-8fa9-444f-8ba9-c255d494da55",
			"name":"isomd5sum",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5769177fb0d06ff4858d12fd6b08d171e3f26f608a5843f3bd7b49f5fcd48d31"
				}
			],
			"description":"\nisomd5sum provides a way of making use of the ISO9660 application data\narea to store md5sum data about the iso.  This allows you to check the\niso given nothing more than the iso itself.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/isomd5sum@1.2.5-1.oe2409?arch=aarch64&epoch=1&upstream=isomd5sum-1.2.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rhinstaller/isomd5sum",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utilities for working with md5sum implanted in ISO images",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.2.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-539ba630-7974-4739-9b9c-6c7386839955",
			"name":"libselinux",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f761222dccec82f227bf00495ec31a7d365eb3056143fe276ea8033a405d8cee"
				}
			],
			"description":"libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libselinux@3.5-3.oe2409?arch=aarch64&epoch=0&upstream=libselinux-3.5-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/SELinuxProject/selinux/wiki",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"SELinux library and simple utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.5-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-b57c957a-a327-4af3-958d-ae7a6223a8f5",
			"name":"libxml2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd"
				}
			],
			"description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlsoft.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library providing XML and HTML support",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pigz-2.8-1adc9040-50a3-4d98-a02c-01394a3d0336-8a7ed0e2-fd65-4261-a8b2-21863fbe8300",
			"name":"pigz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"30093beae3f07148832402a5dd5ce3f9ce25378ab2cb7253612064fe79f486dd"
				}
			],
			"description":"pigz, which stands for parallel implementation of gzip, is a fully functional replacement for gzip that\nexploits multiple processors and multiple cores to the hilt when compressing data. pigz was written by\nMark Adler, and uses the zlib and pthread libraries.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pigz@2.8-1.oe2409?arch=aarch64&epoch=0&upstream=pigz-2.8-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net/pigz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"pigz is a parallel implementation of gzip which utilizes multiple cores",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.8-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-util-linux-2.39.1-bbb528dc-af75-4d12-bf0a-4bda5428a22c-b6777821-2612-42da-b0b9-89513cc95940",
			"name":"util-linux",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"602431fa1e0b6540fae99144c899664ffd33765ff5f4f21f346c3c269e83d492"
				}
			],
			"description":"The util-linux package contains a random collection of files that\nimplements some low-level basic linux utilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/util-linux@2.39.1-13.oe2409?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A random collection of Linux utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.39.1-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-yum-4.16.2-5029467b-a02e-4a03-b90a-273b65c01670-18d481bc-8c06-423c-85e3-8dbabe733d24",
			"name":"yum",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eeba30750fc8c185c87e1f870bbb367a89be10e0f3f2aee7c2257c95288de6d7"
				}
			],
			"description":"Utility that allows users to manage packages on their systems.\\\nIt supports RPMs, modules and comps groups & environments.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/yum@4.16.2-6.oe2409?arch=noarch&epoch=0&upstream=dnf-4.16.2-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/dnf",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Package manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.16.2-6.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-6a16434d-3970-4a11-bfef-2c3b9c684d69"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-createrepo-c-1.1.4-e3cf6046-3a95-486e-8001-974a19161c10-7dbc2a8a-0335-416c-aec1-50a2fa2a2916"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-dnf-plugins-core-4.3.1-8bdb1dae-f0a8-4405-ad9e-5161df9779d1-a0ddc096-a642-46db-915a-f4b7cec90d34"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-file-5.45-9179c84c-2d9b-482a-a784-b34de00ff853-4418e349-4fa3-46a1-9c2a-85ec2f42149b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-genisoimage-1.1.11-905a1b1c-3063-4335-baeb-7855e135b800-cd6474bb-a51b-4164-90ac-424d59b05756"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-d9e57218-3889-41f2-8fb2-ca5c09ac60b6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-isomd5sum-1.2.5-49bf8b5f-2699-4b89-ab2b-20c198f1eadf-e9b4cd78-8fa9-444f-8ba9-c255d494da55"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-539ba630-7974-4739-9b9c-6c7386839955"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-b57c957a-a327-4af3-958d-ae7a6223a8f5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pigz-2.8-1adc9040-50a3-4d98-a02c-01394a3d0336-8a7ed0e2-fd65-4261-a8b2-21863fbe8300"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-util-linux-2.39.1-bbb528dc-af75-4d12-bf0a-4bda5428a22c-b6777821-2612-42da-b0b9-89513cc95940"
		},
		{
			"spdxElementId":"SPDXRef-rpm-envmaker-3.2.0-8078b782-dd37-42a0-b40a-8cee5c2df9f5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-yum-4.16.2-5029467b-a02e-4a03-b90a-273b65c01670-18d481bc-8c06-423c-85e3-8dbabe733d24"
		}
	]
}