{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gobject-introspection-0.1.76.1-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gobject-introspection-0.1.76.1-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2b90c789-26b4-4525-ae0e-ef22e60cf7bf",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-9c4083af-c729-4ea6-b7bb-e8569c857c2d",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-6f6d3f86-ada7-466c-a2bb-4d05cbcf0237",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e95679a6-7515-4ebe-a472-62089db24684",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-a6c9b288-b4c9-47b4-83d7-65d7dfba936d",
			"name":"libffi",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"69c610bef8dec2d884b26fd37da6de3eeceba05c8a51aec526ce7756de211974"
				}
			],
			"description":"Compilers for high level languages generate code that follows certain conventions. These\nconventions are necessary, in part, for separate compilation to work. One such convention\nis the \"calling convention\". The \"calling convention\" is a set of assumptions made by the\ncompiler about where function arguments will be found on entry to a function. A \"calling\nconvention\" also specifies where the return value for a function is found.\n\nSome programs may not know at the time of compilation what arguments are to be passed to a\nfunction. For instance, an interpreter may be told at run-time about the number and types\nof arguments used to call a given function. Libffi can be used in such programs to provide\na bridge from the interpreter program to compiled code.\n\nThe libffi library provides a portable, high level programming interface to various calling\nconventions. This allows a programmer to call any function specified by a call interface\ndescription at run-time.\n\nFFI stands for Foreign Function Interface. A foreign function interface is the popular name\nfor the interface that allows code written in one language to call code written in another\nlanguage. The libffi library really only provides the lowest, machine dependent layer of a\nfully featured foreign function interface. A layer must exist above libffi that handles type\nconversions for values passed between the two languages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libffi@3.4.4-3.oe2409?arch=aarch64&epoch=0&upstream=libffi-3.4.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sourceware.org/libffi",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A Portable Foreign Function Interface Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.4.4-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gobject-introspection-1.76.1-ee5a28fa-ee78-4032-a462-8083f521627c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2b90c789-26b4-4525-ae0e-ef22e60cf7bf"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gobject-introspection-1.76.1-ee5a28fa-ee78-4032-a462-8083f521627c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-9c4083af-c729-4ea6-b7bb-e8569c857c2d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gobject-introspection-1.76.1-ee5a28fa-ee78-4032-a462-8083f521627c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-6f6d3f86-ada7-466c-a2bb-4d05cbcf0237"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gobject-introspection-1.76.1-ee5a28fa-ee78-4032-a462-8083f521627c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e95679a6-7515-4ebe-a472-62089db24684"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gobject-introspection-1.76.1-ee5a28fa-ee78-4032-a462-8083f521627c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-a6c9b288-b4c9-47b4-83d7-65d7dfba936d"
		}
	]
}