{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"harfbuzz-0.8.4.0-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/harfbuzz-0.8.4.0-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-c032ce07-d6da-4355-9127-cf11662da96d",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-8bd14123-b8f6-4661-8813-a82d0c0a6d64",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f24585a3-d69b-4130-a272-2217662288f9",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8e5e8368-9aaa-40ba-bb16-708dd269d1e6",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-graphite2-1.3.14-83360311-fd70-4668-bbd2-17ce8f2f3359-178884f1-b0a9-4a37-a2d3-e15ac40c0144",
			"name":"graphite2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c45f2fb7d90c5169b896457fb9631b5cdb2ec8c08e0c9af33d90d85ad899508f"
				}
			],
			"description":"Graphite is a system that can be used to create “smart fonts” capable of displaying writing systems with various complex behaviors. A smart font contains not only letter shapes but also additional instructions indicating how to combine and position the letters in complex ways.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/graphite2@1.3.14-6.oe2409?arch=aarch64&epoch=0&upstream=graphite2-1.3.14-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sourceforge.net/projects/silgraphite/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Graphite provides cross-platform rendering for complex writing systems",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.3.14-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-c83e8837-0bb0-47dd-b957-dd7f9ff7ffe7",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libicu-74.1-f1bea199-1a30-485b-84a1-41798d0aecfd-8c0c7665-b507-4403-a876-6d749d3c6469",
			"name":"libicu",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"48bd55d16721c2f2ff38b8d74b3b2c8ea282aafa01b1f5e769fd9638c0f956ae"
				}
			],
			"description":"libs package for icu\ne",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libicu@74.1-2.oe2409?arch=aarch64&epoch=0&upstream=icu-74.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://site.icu-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"libs package for icu",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:74.1-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-52df5d83-91c8-4dd1-9297-3aea39d97b3e",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-c032ce07-d6da-4355-9127-cf11662da96d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-8bd14123-b8f6-4661-8813-a82d0c0a6d64"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f24585a3-d69b-4130-a272-2217662288f9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8e5e8368-9aaa-40ba-bb16-708dd269d1e6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-graphite2-1.3.14-83360311-fd70-4668-bbd2-17ce8f2f3359-178884f1-b0a9-4a37-a2d3-e15ac40c0144"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-c83e8837-0bb0-47dd-b957-dd7f9ff7ffe7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libicu-74.1-f1bea199-1a30-485b-84a1-41798d0aecfd-8c0c7665-b507-4403-a876-6d749d3c6469"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-52df5d83-91c8-4dd1-9297-3aea39d97b3e"
		}
	]
}