{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gnome-autoar-0.0.4.4-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gnome-autoar-0.0.4.4-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-df8d8d00-eb9a-4828-89ee-c9f410ad3fb3",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-3550be1e-e893-4db4-9c7f-ffe843c2853c",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gtk3-3.24.41-0a5d9701-f23f-4c43-be2c-2e9a4ca3c5f6-8e3d81a4-7eb3-418b-8305-b3e1dbbda165",
			"name":"gtk3",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ea45c0857ff016f90903fca6d5e24f6ded640d553aec182dde820a78c5be4d1a"
				}
			],
			"description":"GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gtk3@3.24.41-2.oe2409?arch=aarch64&epoch=0&upstream=gtk3-3.24.41-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GTK+ graphical user interface library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.24.41-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-21d65681-0d9a-425e-9581-6718644e8c1b",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gnome-autoar-0.4.4-27b68ff0-7e86-4eb2-810f-ae0c8ebf9701",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-df8d8d00-eb9a-4828-89ee-c9f410ad3fb3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnome-autoar-0.4.4-27b68ff0-7e86-4eb2-810f-ae0c8ebf9701",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-3550be1e-e893-4db4-9c7f-ffe843c2853c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnome-autoar-0.4.4-27b68ff0-7e86-4eb2-810f-ae0c8ebf9701",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gtk3-3.24.41-0a5d9701-f23f-4c43-be2c-2e9a4ca3c5f6-8e3d81a4-7eb3-418b-8305-b3e1dbbda165"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnome-autoar-0.4.4-27b68ff0-7e86-4eb2-810f-ae0c8ebf9701",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-21d65681-0d9a-425e-9581-6718644e8c1b"
		}
	]
}