{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"obs-service-extract_file-0.0.3-5.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/obs-service-extract_file-0.0.3-5.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-516a3607-2f74-4b23-9ea9-1de24fca98d4",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-8e118a2f-0845-4a1d-aaed-9c8c6ddf2da1",
			"name":"bzip2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"01489c08d9921a6c60c57c90b84c8d11fc02c1860f45c6f009bf535704baa64c"
				}
			],
			"description":"bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bzip2@1.0.8-8.oe2409?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.sourceware.org/bzip2/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-quality data compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.8-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cpio-2.15-488dd5f7-8c7c-44bc-8139-1e658bdb51e0-603e86f5-9111-45a6-8314-b4d6eeb1530c",
			"name":"cpio",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0ec2579ace82d038889ecce648d7a67bb464f6fda6567bfc021d30289e49ca5c"
				}
			],
			"description":"GNU cpio copies files into or out of a cpio or tar archive.\nThe archive can be another file on the disk, a magnetic\ntape, or a pipe.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cpio@2.15-1.oe2409?arch=aarch64&epoch=0&upstream=cpio-2.15-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/cpio",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU archiving program",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-findutils-4.10.0-1f7d5d1a-7c1a-444d-962d-420dd7690dd8-1f1e03d0-4eb1-45fd-8736-aad46ca182bb",
			"name":"findutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6628c17de67485ef6aa71c8e8acdb7e12bf93fec52745754d7d44a1684aa11e5"
				}
			],
			"description":"The GNU Find Utilities are the basic directory searching utilities of\nthe GNU operating system. These programs are typically used in\nconjunction with other programs to provide modular and powerful\ndirectory search and file locating capabilities to other commands.\n\nThe tools supplied with this package are:\n\nfind - search for files in a directory hierarchy\nlocate - list files in databases that match a pattern\nupdatedb - update a file name database\nxargs - build and execute command lines from standard input",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/findutils@4.10.0-2.oe2409?arch=aarch64&epoch=2&upstream=findutils-4.10.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/findutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU Find Utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.10.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gzip-1.13-71af26d0-0dca-471d-84d9-9473e87f8375-fbf25735-90fd-49e6-9576-4428d65de87b",
			"name":"gzip",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a59de8b92bc8607dd39cc0945d6950ae2dad34975449d072a758e3514a42fbe6"
				}
			],
			"description":"gzip is a single-file/stream lossless data compression\nutility, where the resulting compressed file generally\nhas the suffix .gz.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gzip@1.13-1.oe2409?arch=aarch64&epoch=0&upstream=gzip-1.13-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/gzip",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A data compression utility",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.13-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-414f9f99-45be-4b0c-9304-06f6fcfc69bc",
			"name":"tar",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a2cd91ffa50e3b1e20180ee00c53e72dbb47a8db59af2119dc7b0cb4bbd743b8"
				}
			],
			"description":"GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tar@1.35-2.oe2409?arch=aarch64&epoch=2&upstream=tar-1.35-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/tar/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An organized and systematic method of controlling a large amount of data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.35-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-unzip-6.0-0bd5d8d2-8cde-497a-9ab0-0c32a99fd4fa-35e3f8dd-e90d-4ed3-bebd-9be971021ed8",
			"name":"unzip",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2bf3ec39f5b717d8e8d02a0b4f6ba24a6fb90ecc18facb45c81b67628c775a58"
				}
			],
			"description":"UnZip is an extraction utility for archives compressed in .zip format.\nUnZip will list, test, or extract files from a .zip archive, commonly found on MS-DOS systems.\nThe default behavior (with no options) is to extract all files into the current directory\n(and subdirectorie below it) from the specified zipfile.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/unzip@6.0-53.oe2409?arch=aarch64&epoch=0&upstream=unzip-6.0-53.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.info-zip.org/UnZip.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A utility for unpacking zip files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.0-53.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-095f8edf-ecb6-4381-b642-16e5b9667257",
			"name":"xz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b0c5487eac6e3c3027f4ce0fdd9dbcb76909417529dacc4433dbc281170f1aef"
				}
			],
			"description":"XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A free general-purpose data compreession software with LZMA2 algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-516a3607-2f74-4b23-9ea9-1de24fca98d4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-8e118a2f-0845-4a1d-aaed-9c8c6ddf2da1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cpio-2.15-488dd5f7-8c7c-44bc-8139-1e658bdb51e0-603e86f5-9111-45a6-8314-b4d6eeb1530c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-findutils-4.10.0-1f7d5d1a-7c1a-444d-962d-420dd7690dd8-1f1e03d0-4eb1-45fd-8736-aad46ca182bb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gzip-1.13-71af26d0-0dca-471d-84d9-9473e87f8375-fbf25735-90fd-49e6-9576-4428d65de87b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-414f9f99-45be-4b0c-9304-06f6fcfc69bc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-unzip-6.0-0bd5d8d2-8cde-497a-9ab0-0c32a99fd4fa-35e3f8dd-e90d-4ed3-bebd-9be971021ed8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-obs-service-extract-file-0.3-c8b2960d-6663-401b-9e2f-036a261ee417",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-095f8edf-ecb6-4381-b642-16e5b9667257"
		}
	]
}