{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"obs-api-deps-0.2.10.15-9.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/obs-api-deps-0.2.10.15-9.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99-f4f97d84-0058-4f3c-b122-16a289207bdc",
			"name":"build",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a0226dbd292685890b4232cdaf61b362576a6651657b87c9b05648b8b77c5f40"
				}
			],
			"description":"This is a tool to build binary packages in a safe and reproducible\nway. The default is to build in a chroot sandbox, but it also\nsupports building in a virtual machine for better security.\nThe build tool can work with multiple package and recipe formats.\nThe currently supported package formats are deb, rpm, and arch.\nThe supported recipe formats are spec, dsc, kiwi, and PKGBUILD.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/build@20230809-1.oe2409?arch=noarch&epoch=0&upstream=build-20230809-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/obs-build",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A tool to build binary packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:20230809-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-mariadb-server-10.5.25-98459b39-c2c9-4280-9f55-a5562b26d656-bcf081f8-6a4a-4230-990f-d48317eccacb",
			"name":"mariadb-server",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6cc5ef8a527063cee6cdcbd5ead576096fd2298df351e4503a778ecf0fa3060f"
				}
			],
			"description":"MariaDB is a multi-user, multi-threaded SQL database server. It is a\nclient/server implementation consisting of a server daemon (mariadbd)\nand many different client programs and libraries. This package contains\nthe MariaDB server and some accompanying files and directories.\nMariaDB is a community developed fork from MySQL.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/mariadb-server@10.5.25-1.oe2409?arch=aarch64&epoch=4&upstream=mariadb-10.5.25-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://mariadb.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The MariaDB server and related files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:10.5.25-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-memcached-1.6.28-6e072df4-2833-4a05-b0af-eac783817095-f35a7160-d059-4bfc-970a-32123dd67ecd",
			"name":"memcached",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"634cd81f14d2a367b6e8f81d765393b4cf243c6e9bd166998597e46ab7876a1b"
				}
			],
			"description":"memcached is a high-performance, distributed memory object caching\nsystem, generic in nature, but intended for use in speeding up dynamic\nweb applications by alleviating database load.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/memcached@1.6.28-1.oe2409?arch=aarch64&epoch=0&upstream=memcached-1.6.28-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.memcached.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-performance, distributed memory object caching system",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.6.28-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-obs-bundled-gems-2.10.15-08409c63-e51a-4bae-abf6-58e34510afdf-59d646cc-bb97-4f75-8ab4-1d0ce238391b",
			"name":"obs-bundled-gems",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5fcc324c67458ffdae793b5ed1bae383f6e3c2d5a8b16caaaccd9a85fde833c4"
				}
			],
			"description":"This package is useful for the Open Build Service. It will figure out\ndenpendent gems, and add them to spec file.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/obs-bundled-gems@2.10.15-9.oe2409?arch=aarch64&epoch=0&upstream=obs-bundled-gems-2.10.15-9.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/cc67b9bcf95c32a4f880909d3a9bce3c38615f48@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.openbuildservice.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The Open Build Service -- Bundled Gems",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.10.15-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-perl-GD-2.81-e40e8555-23b0-486d-9d48-7324bc143240-5b9419ab-f0d3-48f7-8031-4a268460a47d",
			"name":"perl-GD",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9aaabeca84d159b64bfd02386742bb16459c115faa05b5c13fb149f8bf3f6732"
				}
			],
			"description":"This is a autoloadable interface module for libgd, a popular library\nfor creating and manipulating PNG files.  With this library you can\ncreate PNG images on the fly or modify existing files.  Features\ninclude:\n\na.  lines, polygons, rectangles and arcs, both filled and unfilled\nb.  flood fills\nc.  the use of arbitrary images as brushes and as tiled fill patterns\nd.  line styling (dashed lines and the like)\ne.  horizontal and vertical text rendering\nf.  support for transparency and interlacing\ng.  support for TrueType font rendering, via libfreetype.\nh.  support for spline curves, via GD::Polyline\ni.  support for symbolic font names, such as \"helvetica:italic\"\nj.  support for symbolic color names, such as \"green\", via GD::Simple\nk.  produces output in png, gif, jpeg and xbm format\nl.  produces output in svg format via GD::SVG.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/perl-GD@2.81-1.oe2409?arch=aarch64&epoch=0&upstream=perl-GD-2.81-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://metacpan.org/release/GD",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A perl5 interface to Thomas Boutell's gd library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.81-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rubygem-bundler-2.4.10-708d6b22-4191-4eaf-9988-567d304df357-6a3d9a19-c50c-4868-9420-b220ef42a50b",
			"name":"rubygem-bundler",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"55d5073c1e8eaa8c1712f3107a1c29b49af89610b5d6b15ad3ea60b5536a63e4"
				}
			],
			"description":"Bundler manages an application's dependencies through its entire life, across\nmany machines, systematically and repeatably.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rubygem-bundler@2.4.10-1.oe2409?arch=noarch&epoch=0&upstream=rubygem-bundler-2.4.10-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://bundler.io",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library and utilities to manage a Ruby application's gem dependencies",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.10-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rubygem-rake-13.0.6-43db7730-54cf-40ba-b51a-30f2c42ff02d-819a2421-82a7-489d-a571-2bcff9bb0f59",
			"name":"rubygem-rake",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"82462e18a577e3ee7bfcf7f708a851020f593234ccc8cab93df56186ca028eea"
				}
			],
			"description":"Rake is a Make-like program implemented in Ruby,Tasks and dependencies are specified in standard Ruby syntax.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rubygem-rake@13.0.6-145.oe2409?arch=noarch&epoch=0&upstream=ruby-3.2.2-145.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.ruby-lang.org/en/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"make-like utility base on ruby",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:13.0.6-145.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-sphinx-2.2.11-b3df138e-a5d2-4808-a669-62599eb761e0-33ee976b-bfd3-43ed-9709-ceb94e60b568",
			"name":"sphinx",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b770a3da12f58f9abff4706d6240b680a767797b56efbc69e4dc8308859ac24"
				}
			],
			"description":"Sphinx is a full-text search engine, distributed under GPL version 2.\nCommercial licensing (e.g. for embedded use) is also available upon request.\nGenerally, it's a standalone search engine, meant to provide fast,\nsize-efficient and relevant full-text search functions to other\napplications. Sphinx was specially designed to integrate well with SQL\ndatabases and scripting languages.\nCurrently built-in data source drivers support fetching data either via\ndirect connection to MySQL, or PostgreSQL, or from a pipe in a custom XML\nformat. Adding new drivers (e.g. native support other DBMSes) is\ndesigned to be as easy as possible.\nSearch API native ported to PHP, Python, Perl, Ruby, Java, and also\navailable as a plug-gable MySQL storage engine. API is very lightweight so\nporting it to new language is known to take a few hours.\nAs for the name, Sphinx is an acronym which is officially decoded as SQL\nPhrase Index. Yes, I know about CMU's Sphinx project.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/sphinx@2.2.11-2.oe2409?arch=aarch64&epoch=0&upstream=sphinx-2.2.11-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sphinxsearch.com",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Free open-source SQL full-text search engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.2.11-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99-f4f97d84-0058-4f3c-b122-16a289207bdc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-mariadb-server-10.5.25-98459b39-c2c9-4280-9f55-a5562b26d656-bcf081f8-6a4a-4230-990f-d48317eccacb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-memcached-1.6.28-6e072df4-2833-4a05-b0af-eac783817095-f35a7160-d059-4bfc-970a-32123dd67ecd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-obs-bundled-gems-2.10.15-08409c63-e51a-4bae-abf6-58e34510afdf-59d646cc-bb97-4f75-8ab4-1d0ce238391b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-perl-GD-2.81-e40e8555-23b0-486d-9d48-7324bc143240-5b9419ab-f0d3-48f7-8031-4a268460a47d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rubygem-bundler-2.4.10-708d6b22-4191-4eaf-9988-567d304df357-6a3d9a19-c50c-4868-9420-b220ef42a50b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rubygem-rake-13.0.6-43db7730-54cf-40ba-b51a-30f2c42ff02d-819a2421-82a7-489d-a571-2bcff9bb0f59"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-api-deps-2.10.15-295a4750-48f3-4f55-ba87-1b0dc03b7517",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-sphinx-2.2.11-b3df138e-a5d2-4808-a669-62599eb761e0-33ee976b-bfd3-43ed-9709-ceb94e60b568"
		}
	]
}