{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"nodejs-1.20.11.1-3.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/nodejs-1.20.11.1-3.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-28019519-7f64-4116-af73-056927e7d439",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ca-certificates-2023.2.64-5365fe7e-e8df-4250-902d-d61a44bb3b09-b151b13f-11f0-4efc-8ace-6460899e1893",
			"name":"ca-certificates",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"594765113414c9444a189b7f32f4d1656e37588aa9c9d4a1b6c5454119755f90"
				}
			],
			"description":"This package contains the set of CA certificates chosen by the\nMozilla Foundation for use with the Internet PKI.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ca-certificates@2023.2.64-2.oe2409?arch=noarch&epoch=0&upstream=ca-certificates-2023.2.64-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://fedoraproject.org/wiki/CA-Certificates",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The Mozilla CA root certificate bundle",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2023.2.64-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-c3a3fdce-cece-4dbf-b312-36915965aeb6",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-6e55a9ce-1019-46fe-ab3d-ec288a624572",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libuv-1.47.0-f15dda32-fd08-4298-975e-c61ab5101891-b71f9324-4059-44f6-82d3-aa7a7a91cb3f",
			"name":"libuv",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"70f836b25b91c541c2f29b0d0fc44db858d2a20cec2ede5a5fef91f254c633fe"
				}
			],
			"description":"libuv is a multi-platform support library with a focus on asynchronous I/O.\nIt was primarily developed for use by Node.js, but it’s also used by Luvit,\nJulia, pyuv, and others.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libuv@1.47.0-2.oe2409?arch=aarch64&epoch=1&upstream=libuv-1.47.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://libuv.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A multi-platform support library with a focus on asynchronous I/O",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.47.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-nodejs-libs-20.11.1-fccf645b-ce69-44d1-aa6b-af83c2eac2ff-884c7962-99e6-4271-8e22-0ef39925e0d1",
			"name":"nodejs-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4341a22d5f8c0611be23713f7562c140eeae6b924fca21b229b0e2741216275f"
				}
			],
			"description":"Libraries to support Node.js and provide stable v8 interfaces.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/nodejs-libs@20.11.1-3.oe2409?arch=aarch64&epoch=1&upstream=nodejs-20.11.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://nodejs.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Node.js and v8 libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:20.11.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-3.0.12-05b2d5db-fc55-44b2-a2da-1eea3fa5c7f8-217b5b3c-d242-442b-a542-944bd0f3d09f",
			"name":"openssl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7e7d487469f154c5332c3dd711247dad85b60ed71583cbbf2f6f8f2b24d13406"
				}
			],
			"description":"OpenSSL is a robust, commercial-grade, and full-featured toolkit for the\nTransport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Cryptography and SSL/TLS Toolkit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-28019519-7f64-4116-af73-056927e7d439"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ca-certificates-2023.2.64-5365fe7e-e8df-4250-902d-d61a44bb3b09-b151b13f-11f0-4efc-8ace-6460899e1893"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-c3a3fdce-cece-4dbf-b312-36915965aeb6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-6e55a9ce-1019-46fe-ab3d-ec288a624572"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libuv-1.47.0-f15dda32-fd08-4298-975e-c61ab5101891-b71f9324-4059-44f6-82d3-aa7a7a91cb3f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-nodejs-libs-20.11.1-fccf645b-ce69-44d1-aa6b-af83c2eac2ff-884c7962-99e6-4271-8e22-0ef39925e0d1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-nodejs-20.11.1-cc7d8d33-30c7-4f94-b105-8395c8b120cb",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-3.0.12-05b2d5db-fc55-44b2-a2da-1eea3fa5c7f8-217b5b3c-d242-442b-a542-944bd0f3d09f"
		}
	]
}