{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"pango-0.1.52.1-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/pango-0.1.52.1-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-e12023b5-b8d7-4f3d-9564-d4519e2c7ae3",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fontconfig-2.15.0-2b0c4374-97af-4dbb-8448-ce490bacd364-bd8f81c8-2449-4dd3-b7f6-57cf11e7e5f2",
			"name":"fontconfig",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a1a8a3ef4f9ab7b04afccd6b130e81b2a11100c8690a8b60a8cbfe68001fc2b7"
				}
			],
			"description":"Fontconfig  provide different font according to requirements specified by applications,discover new fonts when installed automatically\nbe used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fontconfig@2.15.0-1.oe2409?arch=aarch64&epoch=0&upstream=fontconfig-2.15.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://fontconfig.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Fontconfig is a library for configuring and customizing font access",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-15ec1def-9d44-4940-b94d-46d935054551",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fribidi-1.0.13-66d3342f-3aa8-4025-8977-88441aaecb31-2b3e0bd7-4666-4881-bd2d-a49678bc844a",
			"name":"fribidi",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a62c8e1d829dae1452e72800b06cabf569cbde61d358ad79360e079b9cb3491"
				}
			],
			"description":"A library to handle bidirectional scripts (for example Hebrew, Arabic),\nso that the display is done in the proper way; while the text data itself\nis always written in logical order and display in a different direction .",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fribidi@1.0.13-1.oe2409?arch=aarch64&epoch=0&upstream=fribidi-1.0.13-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fribidi/fribidi/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library implementing the Unicode Bidirectional Algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.13-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-c6dfaa74-869f-4c8c-aef8-96e37bacf359",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-ae8d213a-498a-4b5e-bc0c-3474d19f9907",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-b58e49f1-b6b8-414f-af69-47e38fd48f83",
			"name":"harfbuzz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"080faf1ef8626a5bef7425557815e74405c15a469edbb6c65e4b7f18973aa36b"
				}
			],
			"description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/harfbuzz@8.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=harfbuzz-8.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://harfbuzz.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A text shaping engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libX11-1.8.7-780d1bda-8f9a-4faf-b959-a8f73926d5a4-b2f86b78-ad04-42fd-a43f-5cc9cf66186b",
			"name":"libX11",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"cc1887bb9f8937fd895654f421bf39eb4d286c616b2b54fc95936a04b77c645d"
				}
			],
			"description":"Core X11 protocol client library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libX11@1.8.7-2.oe2409?arch=aarch64&epoch=0&upstream=libX11-1.8.7-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.x.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Core X11 protocol client library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.7-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libXft-2.3.8-e6d9e200-6059-46a5-94d4-7ecebd47dfd7-b5ae37cf-63fa-4409-8a71-8f2c7b3cf8d6",
			"name":"libXft",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6bae5c12367fede09e9387eacb9c3974be2b91062fed4603e46c346cb78fbb57"
				}
			],
			"description":"Xft is a library that connects X applications with the FreeType font\nrasterization library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libXft@2.3.8-1.oe2409?arch=aarch64&epoch=0&upstream=libXft-2.3.8-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://xorg.freedesktop.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"X FreeType library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.8-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libXrender-0.9.11-70950942-e050-4914-82ba-55111ca89fc6-98a69f1a-7732-4de0-81f2-03c19d85f73c",
			"name":"libXrender",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d3b7a3c48ef190be90a0fdd6f4f0bcaca830949efa59d4e196f102c01a15c44a"
				}
			],
			"description":"X.Org X11 libXrender runtime library",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libXrender@0.9.11-1.oe2409?arch=aarch64&epoch=0&upstream=libXrender-0.9.11-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.x.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"X.Org X11 libXrender runtime library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.9.11-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libthai-0.1.29-e21169c8-2d69-4c55-b53f-8f9fdefb46cd-5ec901c5-0a1d-4352-ac50-394750f1fe9b",
			"name":"libthai",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"99d7d2976240b82593395c35df5c9ace74dac6b989701450d385f3459e3aa6ad"
				}
			],
			"description":"LibThai is a C library for developers who need Thai language support in their\nprograms. It includes Thai character set support, Thai character properties,\nThai string manipulators, Thai string collation, Thai word breaking, Thai\ninput method and Thai output method.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libthai@0.1.29-1.oe2409?arch=aarch64&epoch=0&upstream=libthai-0.1.29-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://linux.thai.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libaray for Thai language",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.1.29-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-e12023b5-b8d7-4f3d-9564-d4519e2c7ae3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fontconfig-2.15.0-2b0c4374-97af-4dbb-8448-ce490bacd364-bd8f81c8-2449-4dd3-b7f6-57cf11e7e5f2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-15ec1def-9d44-4940-b94d-46d935054551"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fribidi-1.0.13-66d3342f-3aa8-4025-8977-88441aaecb31-2b3e0bd7-4666-4881-bd2d-a49678bc844a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-c6dfaa74-869f-4c8c-aef8-96e37bacf359"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-ae8d213a-498a-4b5e-bc0c-3474d19f9907"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-b58e49f1-b6b8-414f-af69-47e38fd48f83"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libX11-1.8.7-780d1bda-8f9a-4faf-b959-a8f73926d5a4-b2f86b78-ad04-42fd-a43f-5cc9cf66186b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libXft-2.3.8-e6d9e200-6059-46a5-94d4-7ecebd47dfd7-b5ae37cf-63fa-4409-8a71-8f2c7b3cf8d6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libXrender-0.9.11-70950942-e050-4914-82ba-55111ca89fc6-98a69f1a-7732-4de0-81f2-03c19d85f73c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libthai-0.1.29-e21169c8-2d69-4c55-b53f-8f9fdefb46cd-5ec901c5-0a1d-4352-ac50-394750f1fe9b"
		}
	]
}