{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"fwupd-0.1.8.17-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/fwupd-0.1.8.17-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-52e802a3-1486-4418-b645-c87c1e4c984f",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-4008650f-ecea-4792-8048-dcf88fba2718",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-efivar-libs-38-9191d8b1-d01e-4dda-ad85-81b068b0f8fb-45cdaf28-7f1b-4869-b1c5-d5a2092c52f7",
			"name":"efivar-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"427caced0fad1cb9ee2b430d88fc3171719388753334b62055ca4dfecf4990a0"
				}
			],
			"description":"Libraries for efivar.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/efivar-libs@38-6.oe2409?arch=aarch64&epoch=0&upstream=efivar-38-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rhboot/efivar",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for efivar",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:38-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gcab-1.5-de90ec23-2057-43f3-918e-7b94e391bd73-6de8be9b-f86e-4ee4-a604-cb61bb09cd2e",
			"name":"gcab",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"629b54e06b983af65e5a855f82ffe10d43f30cfd23e3f99e6ed20f39f6ecb82d"
				}
			],
			"description":"Gcab is a gobject library to create cabinet files.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gcab@1.5-1.oe2409?arch=aarch64&epoch=0&upstream=gcab-1.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://ftp.gnome.org/pub/GNOME/sources/gcab",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GObject library to create cabinet files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-b376929f-a3f1-4ba4-bc9c-f25e32c4521e",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-38607bf0-66ad-4a32-97f0-62a6a057cee2",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-c3870216-111a-4f4f-a764-c206a5048919",
			"name":"gnutls",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"25d106732688d10e2195bfc8abf51987a13871c0e44ebf5c75b305c0e22812a1"
				}
			],
			"description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnutls@3.8.2-4.oe2409?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnutls.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU Secure Communication Protocol Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-542b1064-af23-4875-a3e4-4f0269d38e1c",
			"name":"json-glib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d142d050f535557e0c4b4d1a40c913b4262eae719fe248709005713d56c89e57"
				}
			],
			"description":"JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-glib@1.8.0-1.oe2409?arch=aarch64&epoch=0&upstream=json-glib-1.8.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/JsonGlib",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for lightweight data-interchange format",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-db2e5533-5ad4-4e61-aa3f-cfaada23dfb8",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcbor-0.11.0-c342412b-d562-48e1-a626-bcfa53f73a2e-9222160b-e977-4292-8005-857cc260c584",
			"name":"libcbor",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b55789a2d26e09ae848eaaf42fd2a4f03bed7f323790778ef729cb6c25ef89a7"
				}
			],
			"description":"libcbor is a C library for parsing and generating CBOR.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcbor@0.11.0-1.oe2409?arch=aarch64&epoch=0&upstream=libcbor-0.11.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://libcbor.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A CBOR parsing library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.11.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-3d21881c-4e3a-4c5f-b415-7c04326bd1a5",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgudev-238-79ceac61-ff7a-444d-bcc7-9c93caa59e25-82bf5d53-7fa2-4d8c-8baf-6e749df39a05",
			"name":"libgudev",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7c1650a41173d5543b0252e067004cac41260de932ce22435aac8fe031ff7868"
				}
			],
			"description":"Library provides GObject bindings for libudev. It used to be part\nof udev, then merged into systemd. It's now a project on its own.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgudev@238-1.oe2409?arch=aarch64&epoch=0&upstream=libgudev-238-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/libgudev",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library that provides GObject bindings for libudev",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:238-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgusb-0.4.8-e3293892-5b03-4e0f-b7d5-33a577fca758-516c0577-2256-4f54-8002-141ed4da9dbb",
			"name":"libgusb",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d3a2eee9ef4d9cdab29d90adef9d634626e7fe2b20ea917b314bf5cbcd3dd5e6"
				}
			],
			"description":"GUsb is a GObject wrapper for libusb1 that makes it easy to do\nasynchronous control, bulk and interrupt transfers with proper\ncancellation and integration into a mainloop.This makes it easy\nto integrate low level USB transfers with your high-level\napplication or system daemon.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgusb@0.4.8-2.oe2409?arch=aarch64&epoch=0&upstream=libgusb-0.4.8-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/hughsie/libgusb",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GObject-based library for libusb1",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.4.8-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libjcat-0.1.13-3645403b-c708-4b8b-b954-02b76a7d1c5b-98eefb3b-2c91-48b1-8429-65cc6dc365cb",
			"name":"libjcat",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3e3fdf1c54128774e4269fd6d0148f60916ca8c5241f9956e0a9a59695cc0ad3"
				}
			],
			"description":"This library allows reading and writing gzip-compressed JSON catalog files,\nwhich can be used to store GPG, PKCS-7 and SHA-256 checksums for each file.\n\nThis provides equivalent functionality to the catalog files supported in\nMicrosoft Windows.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libjcat@0.1.13-1.oe2409?arch=aarch64&epoch=0&upstream=libjcat-0.1.13-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/hughsie/libjcat",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for reading Jcat files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.1.13-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195-c4aee96f-e7f9-4c3c-9b06-8a9f0e62dc8f",
			"name":"libxmlb",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"770a8ee397887371ef829ce42e9b480a7fe5e0b68026a981e333398d2d0cdb6a"
				}
			],
			"description":"XML is slow to parse and strings inside the document cannot be memory mapped as they do not have\na trailing NUL char. The libxmlb library takes XML source, and converts it to a structured binary\nrepresentation with a deduplicated string table -- where the strings have the NULs included.\n\nThis allows an application to mmap the binary XML file, do an XPath query and return some strings\nwithout actually parsing the entire document. This is all done using (almost) zero allocations and\nno actual copying of the binary data.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxmlb@0.3.14-1.oe2409?arch=aarch64&epoch=0&upstream=libxmlb-0.3.14-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/hughsie/libxmlb",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library to help create and query binary XML blobs",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.3.14-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-05f83303-285b-4132-a87c-e3c73ccb906a",
			"name":"polkit-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c963655efb1678b1d81d5177d150475560505684e9b55bc82056412a99b02cab"
				}
			],
			"description":"Libraries files for polkit.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/polkit-libs@125-1.oe2409?arch=aarch64&epoch=0&upstream=polkit-125-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://polkit.pages.freedesktop.org/polkit/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for polkit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:125-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-protobuf-c-1.4.1-c48b79da-1c1f-4a09-8d82-abe6c1ea29ce-55af05f0-b3c2-4ce3-a08c-efd107d7fd2e",
			"name":"protobuf-c",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8576b5f6362e281c5cf568feca061df214e354252c4c63cd6e4133e290ddbd0c"
				}
			],
			"description":"This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/protobuf-c@1.4.1-1.oe2409?arch=aarch64&epoch=0&upstream=protobuf-c-1.4.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/protobuf-c/protobuf-c",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.4.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shared-mime-info-2.4-27d0bada-1da3-4067-86b6-c34433583a77-ddafc702-d6f0-4772-90b7-b089f5c27954",
			"name":"shared-mime-info",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b5d4f1daf2cf8e8cb2649f16b7750e1c86c838e1510e0da549b4f68b4cdfe434"
				}
			],
			"description":"The shared-mime-info package contains the core database of common types\nand the update-mime-database command used to extend it. It requires\nglib2 to be installed for building the update command. Additionally, it\nuses intltool for translations, though this is only a dependency for\nthe maintainers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shared-mime-info@2.4-1.oe2409?arch=aarch64&epoch=0&upstream=shared-mime-info-2.4-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://freedesktop.org/wiki/Software/shared-mime-info/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared MIME information database",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-f344b5fb-fff6-4ad7-a1f1-408eaee323c0",
			"name":"sqlite",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a81dd6ce0c927bbc00f9fa690bbe65ebb166781328b29018bd8b19bbcb535f4e"
				}
			],
			"description":"SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/sqlite@3.42.0-2.oe2409?arch=aarch64&epoch=0&upstream=sqlite-3.42.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.sqlite.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Embeded SQL database",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.42.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b88969f4-b430-4617-937a-75eeaff0b4c9",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-610667a3-2ce4-47e1-b795-a9cd8ac6bcb4",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-b8b0c20a-6dec-4dfe-a3bf-a5efd51893c2",
			"name":"xz-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f7a2c343af7207883ee704e8002bcaa6df0cbc361434df9eb01085f88657a93f"
				}
			],
			"description":"Libraries for decoding files compressed with LZMA or XZ utils.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz-libs@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for xz",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-52e802a3-1486-4418-b645-c87c1e4c984f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-4008650f-ecea-4792-8048-dcf88fba2718"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-efivar-libs-38-9191d8b1-d01e-4dda-ad85-81b068b0f8fb-45cdaf28-7f1b-4869-b1c5-d5a2092c52f7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gcab-1.5-de90ec23-2057-43f3-918e-7b94e391bd73-6de8be9b-f86e-4ee4-a604-cb61bb09cd2e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-b376929f-a3f1-4ba4-bc9c-f25e32c4521e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-38607bf0-66ad-4a32-97f0-62a6a057cee2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-c3870216-111a-4f4f-a764-c206a5048919"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-542b1064-af23-4875-a3e4-4f0269d38e1c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-db2e5533-5ad4-4e61-aa3f-cfaada23dfb8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcbor-0.11.0-c342412b-d562-48e1-a626-bcfa53f73a2e-9222160b-e977-4292-8005-857cc260c584"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-3d21881c-4e3a-4c5f-b415-7c04326bd1a5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgudev-238-79ceac61-ff7a-444d-bcc7-9c93caa59e25-82bf5d53-7fa2-4d8c-8baf-6e749df39a05"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgusb-0.4.8-e3293892-5b03-4e0f-b7d5-33a577fca758-516c0577-2256-4f54-8002-141ed4da9dbb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libjcat-0.1.13-3645403b-c708-4b8b-b954-02b76a7d1c5b-98eefb3b-2c91-48b1-8429-65cc6dc365cb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195-c4aee96f-e7f9-4c3c-9b06-8a9f0e62dc8f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-05f83303-285b-4132-a87c-e3c73ccb906a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-protobuf-c-1.4.1-c48b79da-1c1f-4a09-8d82-abe6c1ea29ce-55af05f0-b3c2-4ce3-a08c-efd107d7fd2e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shared-mime-info-2.4-27d0bada-1da3-4067-86b6-c34433583a77-ddafc702-d6f0-4772-90b7-b089f5c27954"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-f344b5fb-fff6-4ad7-a1f1-408eaee323c0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b88969f4-b430-4617-937a-75eeaff0b4c9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-610667a3-2ce4-47e1-b795-a9cd8ac6bcb4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-fwupd-1.8.17-93f7f1dd-7683-40b1-ab2b-918368199bcf",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-b8b0c20a-6dec-4dfe-a3bf-a5efd51893c2"
		}
	]
}