{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"graphviz-gd-0.10.0.1-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/graphviz-gd-0.10.0.1-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-bb94a597-3ca0-4430-9b70-ad66c7275a1e",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-f2ac102c-0f84-46f8-8c71-9fbda310720d",
			"name":"expat",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3789391c6958f4728e77e0394317dea13115936981c16b4cac36a15daeebe143"
				}
			],
			"description":"expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/expat@2.6.2-1.oe2409?arch=aarch64&epoch=0&upstream=expat-2.6.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://libexpat.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An XML parser library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gd-2.3.3-ac91352b-de1b-4033-b45c-cf16a75acd78-5ffe64f2-6c6d-4602-81eb-ef84a49dac32",
			"name":"gd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d048957e4952429b2d1a0325f9e2ff64817adb6526713b3e7f45b3b03f058208"
				}
			],
			"description":"The gd graphics library allows your code to quickly draw images complete with lines, arcs, text,\nmultiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or\nJPEG file. The most common applications of GD involve website development,\nalthough it can be used with any standalone application!",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gd@2.3.3-4.oe2409?arch=aarch64&epoch=0&upstream=gd-2.3.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://libgd.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A graphics library for quick creation of PNG or JPEG images",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.3-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f95fbbe6-16c4-484f-a7a0-084095b7fd52",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e4f0729d-c3af-44e3-82a5-764691816380",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-graphviz-10.0.1-e2fb03e3-868b-4382-b93b-e3545055dd25-f718886a-3b33-4ad1-9dcf-f7e6e24bd6af",
			"name":"graphviz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6acec1f9f7a609e6d8fdb66f21d2c6b07db56b3b3ad514d8c570cc3f07123b5a"
				}
			],
			"description":"Graphviz is open source graph visualization software. Graph visualization is a way of representing structural\n information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics,\n software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/graphviz@10.0.1-1.oe2409?arch=aarch64&epoch=0&upstream=graphviz-10.0.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.graphviz.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Graph Visualization Tools",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.0.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-5ee9a5a5-cd1b-4720-9da1-0305d793f894",
			"name":"harfbuzz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"080faf1ef8626a5bef7425557815e74405c15a469edbb6c65e4b7f18973aa36b"
				}
			],
			"description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/harfbuzz@8.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=harfbuzz-8.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://harfbuzz.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A text shaping engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-9bd46c5e-e119-47b8-af98-9b99b5bc7dde",
			"name":"libtool-ltdl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"66598e87d516548af2b124d1827c828b54a233ad96c11806126c06f93e858ca2"
				}
			],
			"description":"The libtool-ltdl package contains the GNU Libtool Dynamic Module Loader, a\nlibrary that provides a consistent, portable interface which simplifies the\nprocess of using dynamic modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtool-ltdl@2.4.7-3.oe2409?arch=aarch64&epoch=0&upstream=libtool-2.4.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libtool/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Runtime libraries for GNU Libtool Dynamic Module Loader",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.7-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-fc740ccd-ba78-44c2-95d2-aeeb4116693e",
			"name":"pango",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d0e418b3de79e6ede6bbcc86497334d2a2864bd7f39f616fe2dc1e7a599750a6"
				}
			],
			"description":"Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pango@1.52.1-1.oe2409?arch=aarch64&epoch=0&upstream=pango-1.52.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pango.gnome.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System for layout and rendering of internationalized text",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.52.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-5addac27-6f95-4c19-bf22-fc4a603584d9",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-bb94a597-3ca0-4430-9b70-ad66c7275a1e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-f2ac102c-0f84-46f8-8c71-9fbda310720d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gd-2.3.3-ac91352b-de1b-4033-b45c-cf16a75acd78-5ffe64f2-6c6d-4602-81eb-ef84a49dac32"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f95fbbe6-16c4-484f-a7a0-084095b7fd52"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e4f0729d-c3af-44e3-82a5-764691816380"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-graphviz-10.0.1-e2fb03e3-868b-4382-b93b-e3545055dd25-f718886a-3b33-4ad1-9dcf-f7e6e24bd6af"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-5ee9a5a5-cd1b-4720-9da1-0305d793f894"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-9bd46c5e-e119-47b8-af98-9b99b5bc7dde"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-fc740ccd-ba78-44c2-95d2-aeeb4116693e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-graphviz-gd-10.0.1-bd139dbb-41cb-42c1-9509-83b3fb1e803c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-5addac27-6f95-4c19-bf22-fc4a603584d9"
		}
	]
}