{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"guile-5.2.2.7-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/guile-5.2.2.7-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-e2b6e3f6-af36-4279-89c6-9017bc06a162",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-bbdc703a-a083-417a-a756-7eb59aafd654",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gc-8.2.6-abc40ccd-8d79-4fb7-9fe8-f5d69562b626-fd18db65-0177-4e61-b423-a2d8be9cde65",
			"name":"gc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"dd435959a91bf2cbb9fe48cd9e7ef062b964c1101d8fdcb58f39cc2b39ce3212"
				}
			],
			"description":"The Boehm-Demers-Weiser conservative garbage collector can be\nused as a garbage collecting replacement for C malloc or C++ new.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gc@8.2.6-3.oe2409?arch=aarch64&epoch=0&upstream=gc-8.2.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.hboehm.info/gc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A garbage collector for C and C++",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.2.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-089b4475-ec9f-4363-9dd2-1bfe9b6b282c",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-a0e7b4e6-0be2-4a62-9b63-98b99bcdcaab",
			"name":"gmp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a1c322fad371cc2048896e9117971e3cd3c6cc8a2a05aa96d0dd72d53637842e"
				}
			],
			"description":"GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gmp@6.3.0-3.oe2409?arch=aarch64&epoch=1&upstream=gmp-6.3.0-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gmplib.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU multiple precision arithmetic library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:6.3.0-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-85acca45-9597-43df-953f-ca0fb0ec2726",
			"name":"libffi",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"69c610bef8dec2d884b26fd37da6de3eeceba05c8a51aec526ce7756de211974"
				}
			],
			"description":"Compilers for high level languages generate code that follows certain conventions. These\nconventions are necessary, in part, for separate compilation to work. One such convention\nis the \"calling convention\". The \"calling convention\" is a set of assumptions made by the\ncompiler about where function arguments will be found on entry to a function. A \"calling\nconvention\" also specifies where the return value for a function is found.\n\nSome programs may not know at the time of compilation what arguments are to be passed to a\nfunction. For instance, an interpreter may be told at run-time about the number and types\nof arguments used to call a given function. Libffi can be used in such programs to provide\na bridge from the interpreter program to compiled code.\n\nThe libffi library provides a portable, high level programming interface to various calling\nconventions. This allows a programmer to call any function specified by a call interface\ndescription at run-time.\n\nFFI stands for Foreign Function Interface. A foreign function interface is the popular name\nfor the interface that allows code written in one language to call code written in another\nlanguage. The libffi library really only provides the lowest, machine dependent layer of a\nfully featured foreign function interface. A layer must exist above libffi that handles type\nconversions for values passed between the two languages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libffi@3.4.4-3.oe2409?arch=aarch64&epoch=0&upstream=libffi-3.4.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sourceware.org/libffi",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A Portable Foreign Function Interface Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.4.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-83b85801-bfbe-4179-9ca9-cde05421d9da",
			"name":"libtool-ltdl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"66598e87d516548af2b124d1827c828b54a233ad96c11806126c06f93e858ca2"
				}
			],
			"description":"The libtool-ltdl package contains the GNU Libtool Dynamic Module Loader, a\nlibrary that provides a consistent, portable interface which simplifies the\nprocess of using dynamic modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtool-ltdl@2.4.7-3.oe2409?arch=aarch64&epoch=0&upstream=libtool-2.4.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libtool/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Runtime libraries for GNU Libtool Dynamic Module Loader",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.7-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libunistring-1.1-c4f31a12-2aef-4d50-a8bb-2d2cfc5eae3e-1bf05157-2cfa-43ed-99ba-37846b98f901",
			"name":"libunistring",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"46137bde6632da774ec5af3ed56ed82bd602e08404863d7f40ca4e2654daa171"
				}
			],
			"description":"Libunistring is a library that provides functions for manipulating Unicode strings\nand for manipulating C strings according to the Unicode standard.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libunistring@1.1-2.oe2409?arch=aarch64&epoch=0&upstream=libunistring-1.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libunistring/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Unicode string library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-eba25ce4-000c-4132-9106-f7e7d231be6e",
			"name":"libxcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b"
				}
			],
			"description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/besser82/libxcrypt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extended crypt library for DES, MD5, Blowfish and others",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.36-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-38e65da0-7093-4e1f-aa38-68b975cff09e",
			"name":"ncurses-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"36fe3ab09be75524eb8fddf9afa3581a65f9f6c643441af42f5938f7ba45e9ce"
				}
			],
			"description":"Libraries for ncurses.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ncurses-libs@6.4-8.oe2409?arch=aarch64&epoch=0&upstream=ncurses-6.4-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://invisible-island.net/ncurses/ncurses.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for ncurses",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.4-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-readline-8.2-c626de48-d42a-4afd-b95b-aff139f6c596-86f95c17-5cbf-4f2a-a600-9ddaeccbc9ae",
			"name":"readline",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"62973007f2eb64b68bb26fd1cadff819fd64870a6f6b9d19878e0d14b075052d"
				}
			],
			"description":"The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/readline@8.2-2.oe2409?arch=aarch64&epoch=0&upstream=readline-8.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tiswww.case.edu/php/chet/readline/rltop.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Readline library for editing typed command lines",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.2-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-e2b6e3f6-af36-4279-89c6-9017bc06a162"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-bbdc703a-a083-417a-a756-7eb59aafd654"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gc-8.2.6-abc40ccd-8d79-4fb7-9fe8-f5d69562b626-fd18db65-0177-4e61-b423-a2d8be9cde65"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-089b4475-ec9f-4363-9dd2-1bfe9b6b282c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-a0e7b4e6-0be2-4a62-9b63-98b99bcdcaab"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-85acca45-9597-43df-953f-ca0fb0ec2726"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-83b85801-bfbe-4179-9ca9-cde05421d9da"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libunistring-1.1-c4f31a12-2aef-4d50-a8bb-2d2cfc5eae3e-1bf05157-2cfa-43ed-99ba-37846b98f901"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-eba25ce4-000c-4132-9106-f7e7d231be6e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-38e65da0-7093-4e1f-aa38-68b975cff09e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-guile-2.2.7-ed6fa992-ed20-431d-894b-9cb48d467079",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-readline-8.2-c626de48-d42a-4afd-b95b-aff139f6c596-86f95c17-5cbf-4f2a-a600-9ddaeccbc9ae"
		}
	]
}