{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"ostree-0.2024.6-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/ostree-0.2024.6-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c0f72ae3-61db-4840-a481-5b10a33bce5c",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-809b9944-869e-4b00-8c53-ac279ad892f6",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-dracut-059-96a16be9-89d7-4b82-8ae5-2be88a144125-7840747b-9b57-459a-b867-05081c439947",
			"name":"dracut",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b39ec51b82d51007a120b503c612188ad83e6fa3460e9a73c8040703497a50d5"
				}
			],
			"description":"dracut contains tools to create bootable initramfses for the Linux\nkernel. Unlike previous implementations, dracut hard-codes as little\nas possible into the initramfs. dracut contains various modules which\nare driven by the event-based udev. Having root on MD, DM, LVM2, LUKS\nis supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network\npackage.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/dracut@059-10.oe2409?arch=aarch64&epoch=0&upstream=dracut-059-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://dracut.wiki.kernel.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Initramfs generator using udev",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:059-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-cfd88250-a04b-4537-8be9-59c68ee19e97",
			"name":"fuse",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"678482e8024b5442d7ec12bb81269cef4b41f047519f05dd8e3f8c148b00b7ac"
				}
			],
			"description":"FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fuse@2.9.9-11.oe2409?arch=aarch64&epoch=0&upstream=fuse-2.9.9-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://fuse.sf.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"User space File System of fuse2",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.9.9-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-95ad22bc-cfc0-42e3-a1b5-2dac62c60868",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-da81041f-fe95-45b5-835f-99444b5ff310",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111-11aede27-27fc-4885-b5f8-50aa87a7b722",
			"name":"gnupg2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c5d9f0ae8a6fe829b73de98e888bd7dd8f5940852579d89ac73f8a01d813de9c"
				}
			],
			"description":"GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP).  GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnupg2@2.4.3-2.oe2409?arch=aarch64&epoch=0&upstream=gnupg2-2.4.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utility for secure communication and data storage",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.3-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-ffb2b065-2b71-4621-963f-7be3e59a3161",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-grub2-efi-aa64-2.12-3dcfafd6-af50-4f73-9fbd-cd253ab33905-dec63158-d641-43bd-b320-3629e017350d",
			"name":"grub2-efi-aa64",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"78fc3b95e22032c345dd30681a6d01753754f3aa1616c56c87494cacf89c1cde"
				}
			],
			"description":"%{desc}\nThis subpackage provides support for efi-aa64 systems.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/grub2-efi-aa64@2.12-23.oe2409?arch=aarch64&epoch=1&upstream=grub2-2.12-23.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/grub/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GRUB for EFI systems.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:2.12-23.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-81f9f708-ccfe-40fa-810e-8a4e3de48d01",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-049f7cc5-89de-48f9-bcdb-ea5a51e299ea",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-dc7e1d30-29b3-44c9-94d0-7f844955f84c",
			"name":"libgpg-error",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe4682620a8d2947fa1644e04c87e1c053805b66b5a50a3e027d8c70fcccc10a"
				}
			],
			"description":"The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgpg-error@1.50-1.oe2409?arch=aarch64&epoch=0&upstream=libgpg-error-1.50-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/related_software/libgpg-error/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for common error values and messages in GnuPG components.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.50-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libmount-2.39.1-8abc9f07-fa79-4f6c-bfac-bb004e1d7861-6ee14be3-6db2-4bfa-b65e-cbe9dd71837e",
			"name":"libmount",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"97878c486652916e5f19702651bb4935359c189f99255c7c57bb245ef6976dd9"
				}
			],
			"description":"This package is the library for device mounting.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libmount@2.39.1-13.oe2409?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for device mounting",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.39.1-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-a01ff8c4-6476-4c1f-8732-b49dfb3141fa",
			"name":"libselinux",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f761222dccec82f227bf00495ec31a7d365eb3056143fe276ea8033a405d8cee"
				}
			],
			"description":"libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libselinux@3.5-3.oe2409?arch=aarch64&epoch=0&upstream=libselinux-3.5-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/SELinuxProject/selinux/wiki",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"SELinux library and simple utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.5-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-c4bf905c-3b27-48ec-a1bf-52718097bfa9",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-c0a7f0f6-260f-44f9-8f21-365933dd8615",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-d5208228-9c41-4e84-89df-69583dafff03",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-c5dd691c-39b4-4576-96b3-35519c81a5d5",
			"name":"xz-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f7a2c343af7207883ee704e8002bcaa6df0cbc361434df9eb01085f88657a93f"
				}
			],
			"description":"Libraries for decoding files compressed with LZMA or XZ utils.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz-libs@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for xz",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-8b6b389e-f50f-4270-845f-9e9a1217ddef",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c0f72ae3-61db-4840-a481-5b10a33bce5c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-809b9944-869e-4b00-8c53-ac279ad892f6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-dracut-059-96a16be9-89d7-4b82-8ae5-2be88a144125-7840747b-9b57-459a-b867-05081c439947"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-cfd88250-a04b-4537-8be9-59c68ee19e97"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-95ad22bc-cfc0-42e3-a1b5-2dac62c60868"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-da81041f-fe95-45b5-835f-99444b5ff310"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111-11aede27-27fc-4885-b5f8-50aa87a7b722"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-ffb2b065-2b71-4621-963f-7be3e59a3161"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-grub2-efi-aa64-2.12-3dcfafd6-af50-4f73-9fbd-cd253ab33905-dec63158-d641-43bd-b320-3629e017350d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-81f9f708-ccfe-40fa-810e-8a4e3de48d01"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-049f7cc5-89de-48f9-bcdb-ea5a51e299ea"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-dc7e1d30-29b3-44c9-94d0-7f844955f84c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libmount-2.39.1-8abc9f07-fa79-4f6c-bfac-bb004e1d7861-6ee14be3-6db2-4bfa-b65e-cbe9dd71837e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-a01ff8c4-6476-4c1f-8732-b49dfb3141fa"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-c4bf905c-3b27-48ec-a1bf-52718097bfa9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-c0a7f0f6-260f-44f9-8f21-365933dd8615"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-d5208228-9c41-4e84-89df-69583dafff03"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-c5dd691c-39b4-4576-96b3-35519c81a5d5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-8b6b389e-f50f-4270-845f-9e9a1217ddef"
		}
	]
}