{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gpgme-0.1.21.0-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gpgme-0.1.21.0-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-17751f07-3d0f-467c-90fb-fe7159a94d06",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111-c4852a93-b8bc-4846-b37d-ad3ec5c032b4",
			"name":"gnupg2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c5d9f0ae8a6fe829b73de98e888bd7dd8f5940852579d89ac73f8a01d813de9c"
				}
			],
			"description":"GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP).  GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnupg2@2.4.3-2.oe2409?arch=aarch64&epoch=0&upstream=gnupg2-2.4.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utility for secure communication and data storage",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.3-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-88e2148a-62cb-4950-b5df-5d1aa4c47b92",
			"name":"libassuan",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2610162e8bc5707599778261b0a306bd4bab12f45bd45cc80be89bc23f9533f6"
				}
			],
			"description":"A small library implementing the so-called Assuan protocal,which is used for IPC between most newer GnuPG cmponents,and provides\\\n\\ both server and client sides functions.\\",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libassuan@2.5.6-2.oe2409?arch=aarch64&epoch=0&upstream=libassuan-2.5.6-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A small library implementing the so-called Assuan protocal",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.6-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-5c5bd3f9-bab1-46b6-a9bb-0c797c66ffac",
			"name":"libgpg-error",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe4682620a8d2947fa1644e04c87e1c053805b66b5a50a3e027d8c70fcccc10a"
				}
			],
			"description":"The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgpg-error@1.50-1.oe2409?arch=aarch64&epoch=0&upstream=libgpg-error-1.50-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/related_software/libgpg-error/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for common error values and messages in GnuPG components.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.50-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-17751f07-3d0f-467c-90fb-fe7159a94d06"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111-c4852a93-b8bc-4846-b37d-ad3ec5c032b4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-88e2148a-62cb-4950-b5df-5d1aa4c47b92"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-5c5bd3f9-bab1-46b6-a9bb-0c797c66ffac"
		}
	]
}