{ "SPDXID":"SPDXRef-DOCUMENT", "name":"flatpak-0.1.15.6-3.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/flatpak-0.1.15.6-3.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40-8dd08fad-881a-4d53-8b50-2943c4cdeeb9", "name":"appstream", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7ce73974c8a8f2c362f5029f4b9de6a899696917a64ca8b77d5c55efb63363b1" } ], "description":"AppStream makes it easy to access application information from the\nAppStream database over a nice GObject-based interface.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/appstream@0.16.1-1.oe2409?arch=aarch64&epoch=0&upstream=appstream-0.16.1-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/ximion/appstream", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Utilities to generate, maintain and access the AppStream database", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.16.1-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-1b6bd321-445c-4c05-9c03-053ffc45ad85", "name":"bash", "checksums":[ { "algorithm":"SHA256", "checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39" } ], "description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/bash", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"It is the Bourne Again Shell", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.2.21-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-bubblewrap-0.8.0-03e04d67-152b-4f7c-b477-3aadecdc46be-1edecef0-9f15-46e8-97d0-febef3828a29", "name":"bubblewrap", "checksums":[ { "algorithm":"SHA256", "checksumValue":"eccceaa3ba3fb6da1151fbf96a3ac8795aae7538bda3cef56c4e0170aea1889b" } ], "description":"There is an effort in the Linux kernel called user namespaces which\nattempts to allow unprivileged users to use container features.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/bubblewrap@0.8.0-2.oe2409?arch=aarch64&epoch=0&upstream=bubblewrap-0.8.0-2.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/projectatomic/bubblewrap", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Core execution tool for unprivileged containers", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.8.0-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-d55a4719-03f7-4802-aac1-dcef67d51326", "name":"coreutils", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702" } ], "description":"These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/coreutils/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A set of basic GNU tools commonly used in shell scripts", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:9.5-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-dconf-0.40.0-3722118b-28df-40f4-946a-c03d13e32483-99869246-c992-4c4c-b72b-700103799de4", "name":"dconf", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f4cdacaadccfab9371293765ee84518621c3a9c3987c98340f82f2ba6da487cc" } ], "description":"Dconf is a low-level configuration system. Its main purpose is to provide a backend\nto GSettings on platforms that don't already have configuration storage systems.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/dconf@0.40.0-3.oe2409?arch=aarch64&epoch=0&upstream=dconf-0.40.0-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://live.gnome.org/dconf", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Dconf provides a backend to the GSettings API in Glib", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.40.0-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-249cba67-1586-488a-b268-78b3bac475de", "name":"fuse", "checksums":[ { "algorithm":"SHA256", "checksumValue":"678482e8024b5442d7ec12bb81269cef4b41f047519f05dd8e3f8c148b00b7ac" } ], "description":"FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/fuse@2.9.9-11.oe2409?arch=aarch64&epoch=0&upstream=fuse-2.9.9-11.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://fuse.sf.net", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"User space File System of fuse2", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.9.9-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-3ca30dcb-629a-476d-a0d9-d06912066198", "name":"gdk-pixbuf2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"1628aee3a1b47ecdac1b95510d5bd8b778b348476404dd504d754ee5a0d4eba1" } ], "description":"gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/gdk-pixbuf2@2.42.10-2.oe2409?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-2.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://gitlab.gnome.org/GNOME/gdk-pixbuf", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"gdk is a multi-platform toolkit for creating graphical user interfaces.", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.42.10-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-3bba2f82-c511-4283-a31c-f6d480109c19", "name":"glib2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d" } ], "description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gtk.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"The core library that forms the basis for projects such as GTK+ and GNOME", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.78.6-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-f9c18720-4c7b-4ff6-8c5d-fbc3ea734d8b", "name":"glibc", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98" } ], "description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.gnu.org/software/glibc/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"The GNU libc libraries", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.38-34.oe2409" }, { "SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-4f96051d-df57-428e-b9eb-748c73620b10", "name":"gpgme", "checksums":[ { "algorithm":"SHA256", "checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0" } ], "description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications. It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://gnupg.org/related_software/gpgme/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"GnuPG Made Easy", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.21.0-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-52a9d876-e985-413f-b18d-6abc5bebf441", "name":"json-glib", "checksums":[ { "algorithm":"SHA256", "checksumValue":"d142d050f535557e0c4b4d1a40c913b4262eae719fe248709005713d56c89e57" } ], "description":"JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/json-glib@1.8.0-1.oe2409?arch=aarch64&epoch=0&upstream=json-glib-1.8.0-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://wiki.gnome.org/Projects/JsonGlib", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Library for lightweight data-interchange format", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.8.0-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-libXau-1.0.11-1b3530fd-2410-4619-882d-67556ab0cd92-dffaac0f-3a79-4829-869f-831764825884", "name":"libXau", "checksums":[ { "algorithm":"SHA256", "checksumValue":"60488ea8f6b770a64c378d2eda089f7d6c9b3552cb4021ce7bf6875fc8b1324f" } ], "description":"This is a very simple mechanism for providing individual access to an X Window\nSystem display.It uses existing core protocol and library hooks for specifying\nauthorization data in the connection setup block to restrict use of the display\nto only those clients that show that they know a server-specific key\ncalled a \"magic cookie\".", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libXau@1.0.11-1.oe2409?arch=aarch64&epoch=0&upstream=libXau-1.0.11-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.x.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Sample Authorization Protocol for X", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.0.11-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-a674e749-3fdd-474d-9853-33f08bf38783", "name":"libarchive", "checksums":[ { "algorithm":"SHA256", "checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0" } ], "description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.libarchive.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Multi-format archive and compression library", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.7.1-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-f1b8d0c8-0d07-4485-a50a-a25e13f2a1e7", "name":"libcurl", "checksums":[ { "algorithm":"SHA256", "checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553" } ], "description":"A library for getting files from web servers.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://curl.se/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A library for getting files from web servers", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:8.4.0-10.oe2409" }, { "SPDXID":"SPDXRef-rpm-librsvg2-2.57.92-dcd998f6-ae90-4489-b0be-95b46589072e-e825dfb9-9f67-4c75-9222-d46e2fbb1d59", "name":"librsvg2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"1bbebb0ceda47a7a8d0655db01078b00f2d5522d5a3255be89c9ecdc1c7d0e30" } ], "description":"An SVG library based on cairo.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/librsvg2@2.57.92-3.oe2409?arch=aarch64&epoch=0&upstream=librsvg2-2.57.92-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://wiki.gnome.org/Projects/LibRsvg", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"An SVG library based on cairo", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.57.92-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-0ceaac08-83f4-42ff-a40d-5a0e5e6d194b", "name":"libseccomp", "checksums":[ { "algorithm":"SHA256", "checksumValue":"8587cac95cea90fa88a47c4da2937198c025b5b967e4b2180ea7285ccd16c533" } ], "description":"The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libseccomp@2.5.4-3.oe2409?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/seccomp/libseccomp", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Interface to the syscall filtering mechanism", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.5.4-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-e08befa4-5a43-49b8-b501-52365dc4911f", "name":"libxml2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd" } ], "description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://xmlsoft.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Library providing XML and HTML support", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.12.6-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-40f53be2-44ea-4d64-99ea-79ce0f352d66", "name":"ostree", "checksums":[ { "algorithm":"SHA256", "checksumValue":"e38ff7826343b6a9bde18799b287fc423570591290f3255ec4af04d2b22401f1" } ], "description":"This project is now known as \"libostree\", though it is still appropriate to use the previous name: \"OSTree\"\n(or \"ostree\"). The focus is on projects which use libostree's shared library, rather than users directly\ninvoking the command line tools (except for build systems). However, in most of the rest of the documentation,\nwe will use the term \"OSTree\", since it's slightly shorter, and changing all documentation at once is impractical.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/ostree@2024.6-1.oe2409?arch=aarch64&epoch=0&upstream=ostree-2024.6-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://ostreedev.github.io/ostree/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A tool like git for operating system binaries", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2024.6-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-37a9a101-ca20-4b3c-b1d9-2117bd51ca70", "name":"polkit-libs", "checksums":[ { "algorithm":"SHA256", "checksumValue":"c963655efb1678b1d81d5177d150475560505684e9b55bc82056412a99b02cab" } ], "description":"Libraries files for polkit.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/polkit-libs@125-1.oe2409?arch=aarch64&epoch=0&upstream=polkit-125-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://polkit.pages.freedesktop.org/polkit/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Libraries for polkit", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:125-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-86f03730-517e-4c65-bec4-74d5f163783d", "name":"systemd", "checksums":[ { "algorithm":"SHA256", "checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5" } ], "description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://systemd.io/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"System and Service Manager", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:255-21.oe2409" }, { "SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-16106dfd-8bc0-4066-beb1-83b7af180b3c", "name":"systemd-libs", "checksums":[ { "algorithm":"SHA256", "checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d" } ], "description":"Libraries for systemd and udev.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://systemd.io/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"systemd libraries", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:255-21.oe2409" }, { "SPDXID":"SPDXRef-rpm-wayland-1.22.0-20432e6c-ee4f-470b-8542-e5b60f7ebe92-bc482213-56b5-4bc8-8047-2d2907753c16", "name":"wayland", "checksums":[ { "algorithm":"SHA256", "checksumValue":"13092aadc9b5c864534c4c01ac8d91c3c4b3373d058fdfadd098634db57bd9ec" } ], "description":"Wayland is a protocol for a compositor to talk to its clients as\nwell as a C library implementation of that protocol. The\ncompositor can be a standalone display server running on Linux\nkernel modesetting and evdev input devices, an X application, or\na wayland client itself. The clients can be traditional\napplications, X servers (rootless or fullscreen) or other display\nservers.\n\nPart of the Wayland project is also the Weston reference\nimplementation of a Wayland compositor. Weston can run as an X\nclient or under Linux KMS and ships with a few demo clients. The\nWeston compositor is a minimal and fast compositor and is\nsuitable for many embedded and mobile use cases.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/wayland@1.22.0-1.oe2409?arch=aarch64&epoch=0&upstream=wayland-1.22.0-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://wayland.freedesktop.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Wayland Compositor Infrastructure", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.22.0-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-xdg-dbus-proxy-0.1.2-16ac5457-cfb6-4ba1-8000-4ef18c0b72e1-8917e532-36b6-41f6-9a12-644cd6c60e61", "name":"xdg-dbus-proxy", "checksums":[ { "algorithm":"SHA256", "checksumValue":"b3db0a0fdbf758ee16a61efb2113f465b624ce492bf795dbb545e42274d890bb" } ], "description":"xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally\npart of the flatpak project, but it has been broken out as a standalone module\nto facilitate using it in other contexts.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/xdg-dbus-proxy@0.1.2-1.oe2409?arch=aarch64&epoch=0&upstream=xdg-dbus-proxy-0.1.2-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/flatpak/xdg-dbus-proxy/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filtering proxy for D-Bus connections", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.1.2-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-72053cfd-13bc-4370-80fa-181b29615754", "name":"zstd", "checksums":[ { "algorithm":"SHA256", "checksumValue":"540889791e83a2032aa07967ce6d2791f3353208081a165a351dd65208d2bb9d" } ], "description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/zstd@1.5.6-1.oe2409?arch=aarch64&epoch=0&upstream=zstd-1.5.6-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/facebook/zstd", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A fast lossless compression algorithm", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.5.6-1.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-appstream-0.16.1-97f805d9-8155-4425-b0e1-0a470811ee40-8dd08fad-881a-4d53-8b50-2943c4cdeeb9" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-1b6bd321-445c-4c05-9c03-053ffc45ad85" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-bubblewrap-0.8.0-03e04d67-152b-4f7c-b477-3aadecdc46be-1edecef0-9f15-46e8-97d0-febef3828a29" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-d55a4719-03f7-4802-aac1-dcef67d51326" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-dconf-0.40.0-3722118b-28df-40f4-946a-c03d13e32483-99869246-c992-4c4c-b72b-700103799de4" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-249cba67-1586-488a-b268-78b3bac475de" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-3ca30dcb-629a-476d-a0d9-d06912066198" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-3bba2f82-c511-4283-a31c-f6d480109c19" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-f9c18720-4c7b-4ff6-8c5d-fbc3ea734d8b" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-4f96051d-df57-428e-b9eb-748c73620b10" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-52a9d876-e985-413f-b18d-6abc5bebf441" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libXau-1.0.11-1b3530fd-2410-4619-882d-67556ab0cd92-dffaac0f-3a79-4829-869f-831764825884" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-a674e749-3fdd-474d-9853-33f08bf38783" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-f1b8d0c8-0d07-4485-a50a-a25e13f2a1e7" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-librsvg2-2.57.92-dcd998f6-ae90-4489-b0be-95b46589072e-e825dfb9-9f67-4c75-9222-d46e2fbb1d59" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-0ceaac08-83f4-42ff-a40d-5a0e5e6d194b" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-e08befa4-5a43-49b8-b501-52365dc4911f" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-40f53be2-44ea-4d64-99ea-79ce0f352d66" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-37a9a101-ca20-4b3c-b1d9-2117bd51ca70" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-86f03730-517e-4c65-bec4-74d5f163783d" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-16106dfd-8bc0-4066-beb1-83b7af180b3c" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-wayland-1.22.0-20432e6c-ee4f-470b-8542-e5b60f7ebe92-bc482213-56b5-4bc8-8047-2d2907753c16" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-xdg-dbus-proxy-0.1.2-16ac5457-cfb6-4ba1-8000-4ef18c0b72e1-8917e532-36b6-41f6-9a12-644cd6c60e61" }, { "spdxElementId":"SPDXRef-rpm-flatpak-1.15.6-aec04782-2e4d-4803-8317-c2b1f1ce8953", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-72053cfd-13bc-4370-80fa-181b29615754" } ] }