{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"libdnf-0.0.70.2-5.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/libdnf-0.0.70.2-5.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f8d264a0-a187-43ad-ad30-bc4389aa2507",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b5e17af3-59f6-4409-ba70-35e64608396c",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-e85400e0-7428-433f-82aa-2376e9a72436",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-9f04df71-4111-4fcb-a163-9dace65b5fd7",
			"name":"json-c",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a097297c8c2dcd0d761f3762140929837eb38fa73864e8c8435bc3bcaa104564"
				}
			],
			"description":"JSON-C implements a reference counting object model that allows you\nto easily construct JSON objects in C, output them as JSON formatted\nstrings and parse JSON formatted strings back into the C representation\nof JSON objects.  It aims to conform to RFC 7159.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-c@0.17-3.oe2409?arch=aarch64&epoch=0&upstream=json-c-0.17-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/json-c/json-c",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JSON implementation in C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.17-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-3517a0f7-2860-45e6-acae-b0b4cc3fd647",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libmodulemd-2.15.0-2d8e2876-dbf5-4cb7-9fe8-5d7d5d627f9c-b9bdfa11-c7a2-41dc-8fff-caaa93d34c8b",
			"name":"libmodulemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"dfffc94202e392e02c1f837ad67bc8bec67efdcf6d0abe4d11567407f7226f5d"
				}
			],
			"description":"The libmodulemd API provides a number of convenience tools for\ninteracting with repodata (that is, streams of YAML that contains\ninformation on multiple streams, default data and translations).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libmodulemd@2.15.0-1.oe2409?arch=aarch64&epoch=0&upstream=libmodulemd-2.15.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-modularity/libmodulemd",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C Library for manipulating module metadata files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-librepo-1.15.2-a2de74ff-d90f-49fc-9b00-2fd24174f719-f940f383-46ab-4801-811d-0560c3c82721",
			"name":"librepo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"979fc9cc0ee506ae610976750f9c5fdb4cf2b4cb1ea1cc84f2a1b06c751bdf85"
				}
			],
			"description":"A library providing C and Python (libcURL like) API to downloading repository\nmetadata.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/librepo@1.15.2-1.oe2409?arch=aarch64&epoch=0&upstream=librepo-1.15.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/librepo",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Repodata downloading library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.15.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libsmartcols-2.39.1-8498b8fa-c288-4c30-a068-9551249596e2-7bcaf18c-a435-4658-86ef-02aad7f4b7fb",
			"name":"libsmartcols",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ea7081eae6309e512b11f174794411372599e08fb94bfd60071e131293b1e51d"
				}
			],
			"description":"This package contains the library for column based text sort engine.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libsmartcols@2.39.1-13.oe2409?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for column based text sort engine.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.39.1-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7-ed83dae2-adbc-4aac-abb7-ac8ca6fffcf1",
			"name":"libsolv",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"89eaa11fd5524cf2f10523106c3b6050d25e8d7513eceea75f8281e9193941bf"
				}
			],
			"description":"A free package dependency solver using a satisfiability algorithm. The\nlibrary is based on two major, but independent, blocks:\n\n- Using a dictionary approach to store and retrieve package\n  and dependency information.\n\n- Using satisfiability, a well known and researched topic, for\n  resolving package dependencies.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libsolv@0.7.24-4.oe2409?arch=aarch64&epoch=0&upstream=libsolv-0.7.24-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/libsolv",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Package dependency solver",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.7.24-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-8d31c884-6b16-4357-a5c6-854a92e99776",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-a9ef2123-1c41-4bbd-bfbc-d6fab28f9417",
			"name":"rpm-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"efa1910d5b244951efa6deb3b9e5fb86d6e0879a44f57263cb8abad733687b43"
				}
			],
			"description":"Shared library of rpm 4.18.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-libs@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared library of rpm 4.18",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-5afd1c25-478a-4747-a667-e8b3a73cea4f",
			"name":"sqlite",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a81dd6ce0c927bbc00f9fa690bbe65ebb166781328b29018bd8b19bbcb535f4e"
				}
			],
			"description":"SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/sqlite@3.42.0-2.oe2409?arch=aarch64&epoch=0&upstream=sqlite-3.42.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.sqlite.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Embeded SQL database",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.42.0-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-f8d264a0-a187-43ad-ad30-bc4389aa2507"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b5e17af3-59f6-4409-ba70-35e64608396c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-e85400e0-7428-433f-82aa-2376e9a72436"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-9f04df71-4111-4fcb-a163-9dace65b5fd7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-3517a0f7-2860-45e6-acae-b0b4cc3fd647"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libmodulemd-2.15.0-2d8e2876-dbf5-4cb7-9fe8-5d7d5d627f9c-b9bdfa11-c7a2-41dc-8fff-caaa93d34c8b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-librepo-1.15.2-a2de74ff-d90f-49fc-9b00-2fd24174f719-f940f383-46ab-4801-811d-0560c3c82721"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libsmartcols-2.39.1-8498b8fa-c288-4c30-a068-9551249596e2-7bcaf18c-a435-4658-86ef-02aad7f4b7fb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7-ed83dae2-adbc-4aac-abb7-ac8ca6fffcf1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-8d31c884-6b16-4357-a5c6-854a92e99776"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-a9ef2123-1c41-4bbd-bfbc-d6fab28f9417"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libdnf-0.70.2-6283eaf7-fab5-44a3-a8f8-7ce268d6065c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-5afd1c25-478a-4747-a667-e8b3a73cea4f"
		}
	]
}