{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"pin-gcc-client-0.0.4.1-14.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/pin-gcc-client-0.0.4.1-14.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f58eedaf-d418-4099-8537-0347b443ca4b",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-e368c7d0-0b9f-4724-88ef-1eb977cd82a7",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gcc-12.3.1-0fb7678f-500f-4858-a26f-7a83c9654197-ab48d8cf-23d3-4de4-b08f-5132bd1b0bf3",
			"name":"gcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"81cb20dc087bd52341e0ff37e8dfef7d8f59266589ef215ae918c1c560b68b32"
				}
			],
			"description":"The gcc package contains the GNU Compiler Collection version 12.\nYou'll need this package in order to compile C code.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Various compilers (C, C++, Objective-C, ...)",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-7eca84e4-b35b-4d94-820e-056f0990451f",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-grpc-1.60.0-81a8509f-945c-4c0e-91cf-3b3a52ad0a7d-e13c7fdb-42ea-4323-9ff7-ba0af550cd81",
			"name":"grpc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6b6ac9d91888059ece14ff806460c9c72fc347f2a344d97ff9238c36f10a5792"
				}
			],
			"description":"gRPC is a modern open source high performance RPC framework that can run in any environment.\nIt can efficiently connect services in and across data centers with pluggable support for\nload balancing, tracing, health checking and authentication. It is also applicable in last\nmile of distributed computing to connect devices, mobile applications and browsers to backend services.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/grpc@1.60.0-4.oe2409?arch=aarch64&epoch=0&upstream=grpc-1.60.0-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.grpc.io",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A modern, open source high performance RPC framework that can run in any environment",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.60.0-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jsoncpp-1.9.5-ec2bafa4-88bc-4fa9-9b04-71441a9c46d3-4e558a14-5b61-4322-82ef-d75349ed0479",
			"name":"jsoncpp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4322ad220dfdedcdb41dd09a6abe24f18606768cf5b764b5c3cde680922d0d2c"
				}
			],
			"description":"JsonCpp is a C++ library that allows manipulating JSON values,\nincluding serialization and deserialization to and from strings.\nIt can also preserve existing comment in unserialization/serialization steps,\nmaking it a convenient format to store user input files.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jsoncpp@1.9.5-5.oe2409?arch=aarch64&epoch=0&upstream=jsoncpp-1.9.5-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/open-source-parsers/jsoncpp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JSON C++ library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.9.5-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-40a932b0-5333-40c2-9b6c-da617926c75d",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-d9c6c2a3-9bb4-4070-8c78-f5c4f543a2e5",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-llvm-libs-17.0.6-3858f8d2-53be-4989-bc59-3845e143ae6b-cd3a3578-c4a3-44f7-98ef-b358927566c7",
			"name":"llvm-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ae6474eb479387f604e13d07a74aeebafbb6bbd901a4cf05f9c8681ed1357a49"
				}
			],
			"description":"Shared libraries for the LLVM compiler infrastructure.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/llvm-libs@17.0.6-13.oe2409?arch=aarch64&epoch=0&upstream=llvm-17.0.6-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://llvm.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"LLVM shared libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:17.0.6-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-protobuf-25.1-2d1e655e-a46e-49d5-95e2-7dd4c4bf014c-64ffb494-a2cd-4acc-8fef-b61d2e86deaa",
			"name":"protobuf",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"40c0527d403bc67d1bd21459263a139435a3f0933ee1c7d00b8d2ce1374b6dee"
				}
			],
			"description":"\nProtocol Buffers (a.k.a., protobuf) are Google's language-neutral,\nplatform-neutral, extensible mechanism for serializing structured data.\nYou can find protobuf's documentation on the Google Developers site.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/protobuf@25.1-4.oe2409?arch=aarch64&epoch=0&upstream=protobuf-25.1-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/protocolbuffers/protobuf",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Protocol Buffers - Google's data interchange format",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:25.1-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f58eedaf-d418-4099-8537-0347b443ca4b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-e368c7d0-0b9f-4724-88ef-1eb977cd82a7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gcc-12.3.1-0fb7678f-500f-4858-a26f-7a83c9654197-ab48d8cf-23d3-4de4-b08f-5132bd1b0bf3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-7eca84e4-b35b-4d94-820e-056f0990451f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-grpc-1.60.0-81a8509f-945c-4c0e-91cf-3b3a52ad0a7d-e13c7fdb-42ea-4323-9ff7-ba0af550cd81"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jsoncpp-1.9.5-ec2bafa4-88bc-4fa9-9b04-71441a9c46d3-4e558a14-5b61-4322-82ef-d75349ed0479"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-40a932b0-5333-40c2-9b6c-da617926c75d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-d9c6c2a3-9bb4-4070-8c78-f5c4f543a2e5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-llvm-libs-17.0.6-3858f8d2-53be-4989-bc59-3845e143ae6b-cd3a3578-c4a3-44f7-98ef-b358927566c7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-pin-gcc-client-0.4.1-015689bc-7139-4f97-8fa0-fa80193e10b2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-protobuf-25.1-2d1e655e-a46e-49d5-95e2-7dd4c4bf014c-64ffb494-a2cd-4acc-8fef-b61d2e86deaa"
		}
	]
}