{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"harfbuzz-devel-0.8.4.0-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/harfbuzz-devel-0.8.4.0-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-9f42f0a7-40e2-43ca-8460-5d68fb44ac0d",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cairo-devel-1.18.0-8cdca5e4-04e6-4bc7-b468-d9294dba0992-6facf9f6-5191-4aca-b4d0-cce1779f53b9",
			"name":"cairo-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"54f0d016b918058fb072d1bdfece4f71b5e8f8924d01c9f01efedc59f3ec68d3"
				}
			],
			"description":"This package contains libraries, header files and developer documentation\nneeded for developing software which uses the cairo graphics library and\ncairo GObject library and contains tools for working with the cairo graphics\nlibrary as well.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo-devel@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development files for cairo",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-01183768-19cf-4683-a086-db165d262c60",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-devel-2.13.2-5e8cd6a9-807d-41b3-94b2-ceed90543b98-aff75d3d-22fd-4904-96a5-92947f2f1fe1",
			"name":"freetype-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a1620406f1b836fa93d76d268ba934f6a70be5b008fab22b789d70dbfeaddf14"
				}
			],
			"description":"The freetype-devel package includes the static libraries and header files\nfor the FreeType font rendering engine.Install freetype-devel if you want to develop programs which will use\nFreeType.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype-devel@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType development libraries and header files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-e66d55a6-f857-4f84-91f9-93734dddfac5",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-devel-2.78.6-37f3d058-8cca-4193-901e-65463e4986fa-c674371e-0ca0-4f91-98e9-87bfb43cf78e",
			"name":"glib2-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"27c95fcc15fc74bf035fb9550adc4319118883b89f9fe16b8bc5b2e5f008517c"
				}
			],
			"description":"Development files for the GLib library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2-devel@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development files for the GLib library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b0a4a627-4241-4db0-a24b-65a310a7c11d",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-graphite2-devel-1.3.14-c12486c6-5a59-4c73-967a-bee3fb2cd453-c81da797-c108-470a-8061-e9401e2c9aa9",
			"name":"graphite2-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a0af092174da187267e5dfde8277515f2d791ca264fa042e6e8062dcb8a73dbf"
				}
			],
			"description":"Header files for using the graphite2 libraries.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/graphite2-devel@1.3.14-6.oe2409?arch=aarch64&epoch=0&upstream=graphite2-1.3.14-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sourceforge.net/projects/silgraphite/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development headers and libraries for graphite2",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.3.14-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-08088003-8641-4232-982e-bda24af3b42e",
			"name":"harfbuzz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"080faf1ef8626a5bef7425557815e74405c15a469edbb6c65e4b7f18973aa36b"
				}
			],
			"description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/harfbuzz@8.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=harfbuzz-8.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://harfbuzz.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A text shaping engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libicu-devel-74.1-3747535e-4274-4188-ba6f-5304396c5751-5e71449a-48af-462d-9fef-b060f3575f95",
			"name":"libicu-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3a638c5dd941d66ee32d76b1b74a16c4b84ed6eccb3e8bf12566d5d713641047"
				}
			],
			"description":"header files for libicu",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libicu-devel@74.1-2.oe2409?arch=aarch64&epoch=0&upstream=icu-74.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://site.icu-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"header files for libicu",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:74.1-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-9f42f0a7-40e2-43ca-8460-5d68fb44ac0d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-devel-1.18.0-8cdca5e4-04e6-4bc7-b468-d9294dba0992-6facf9f6-5191-4aca-b4d0-cce1779f53b9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-01183768-19cf-4683-a086-db165d262c60"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-devel-2.13.2-5e8cd6a9-807d-41b3-94b2-ceed90543b98-aff75d3d-22fd-4904-96a5-92947f2f1fe1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-e66d55a6-f857-4f84-91f9-93734dddfac5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-devel-2.78.6-37f3d058-8cca-4193-901e-65463e4986fa-c674371e-0ca0-4f91-98e9-87bfb43cf78e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b0a4a627-4241-4db0-a24b-65a310a7c11d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-graphite2-devel-1.3.14-c12486c6-5a59-4c73-967a-bee3fb2cd453-c81da797-c108-470a-8061-e9401e2c9aa9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-08088003-8641-4232-982e-bda24af3b42e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-harfbuzz-devel-8.4.0-1ccdf7bc-9983-46f9-9c13-cabba6e843fa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libicu-devel-74.1-3747535e-4274-4188-ba6f-5304396c5751-5e71449a-48af-462d-9fef-b060f3575f95"
		}
	]
}