{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"rpm-ostree-0.2024.4-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/rpm-ostree-0.2024.4-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c2124347-bf65-472e-8a23-eba388330329",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bubblewrap-0.8.0-03e04d67-152b-4f7c-b477-3aadecdc46be-27f410eb-63be-476f-8092-23e183817bd9",
			"name":"bubblewrap",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eccceaa3ba3fb6da1151fbf96a3ac8795aae7538bda3cef56c4e0170aea1889b"
				}
			],
			"description":"There is an effort in the Linux kernel called user namespaces which\nattempts to allow unprivileged users to use container features.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bubblewrap@0.8.0-2.oe2409?arch=aarch64&epoch=0&upstream=bubblewrap-0.8.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/projectatomic/bubblewrap",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Core execution tool for unprivileged containers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.8.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-49e0c40d-5034-40a8-931d-5ca31ba87977",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-40feb8de-42ec-426a-8b63-b9937a73d022",
			"name":"fuse",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"678482e8024b5442d7ec12bb81269cef4b41f047519f05dd8e3f8c148b00b7ac"
				}
			],
			"description":"FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fuse@2.9.9-11.oe2409?arch=aarch64&epoch=0&upstream=fuse-2.9.9-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://fuse.sf.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"User space File System of fuse2",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.9.9-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-8a4a30f4-bd9d-4f26-a873-a62f0137d0a9",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-2d9b3b3e-8691-421f-914a-d8b3891c3d7b",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-8518daa8-c220-4f58-b889-87fa8238a154",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-103584d8-4c1b-4722-9629-4e16d6492a3c",
			"name":"json-c",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a097297c8c2dcd0d761f3762140929837eb38fa73864e8c8435bc3bcaa104564"
				}
			],
			"description":"JSON-C implements a reference counting object model that allows you\nto easily construct JSON objects in C, output them as JSON formatted\nstrings and parse JSON formatted strings back into the C representation\nof JSON objects.  It aims to conform to RFC 7159.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-c@0.17-3.oe2409?arch=aarch64&epoch=0&upstream=json-c-0.17-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/json-c/json-c",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JSON implementation in C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.17-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-c66a48fa-a493-41a8-b9c7-760872df171a",
			"name":"json-glib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d142d050f535557e0c4b4d1a40c913b4262eae719fe248709005713d56c89e57"
				}
			],
			"description":"JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-glib@1.8.0-1.oe2409?arch=aarch64&epoch=0&upstream=json-glib-1.8.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/JsonGlib",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for lightweight data-interchange format",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-1f463cbb-e0f0-48e8-9676-9481027580ff",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcap-2.69-7ce44255-2200-417a-98d3-6f3cb1d31109-a1cf5488-8246-4e7f-bc4f-4ac4bc5f51ac",
			"name":"libcap",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"04940dafdf5ee9421aae3b19af992eebdba803500f4fc019a700b9a85c377590"
				}
			],
			"description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcap@2.69-3.oe2409?arch=aarch64&epoch=0&upstream=libcap-2.69-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sites.google.com/site/fullycapable",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting and setting POSIX.1e draft 15 capabilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.69-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-73ded70e-ae06-47d3-9f14-ca039774baac",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libmodulemd-2.15.0-2d8e2876-dbf5-4cb7-9fe8-5d7d5d627f9c-8dd21ab4-4192-4292-b2b7-7591380ec034",
			"name":"libmodulemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"dfffc94202e392e02c1f837ad67bc8bec67efdcf6d0abe4d11567407f7226f5d"
				}
			],
			"description":"The libmodulemd API provides a number of convenience tools for\ninteracting with repodata (that is, streams of YAML that contains\ninformation on multiple streams, default data and translations).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libmodulemd@2.15.0-1.oe2409?arch=aarch64&epoch=0&upstream=libmodulemd-2.15.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-modularity/libmodulemd",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C Library for manipulating module metadata files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-librepo-1.15.2-a2de74ff-d90f-49fc-9b00-2fd24174f719-ef37af6f-d437-4b0a-9104-344d5e611a6d",
			"name":"librepo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"979fc9cc0ee506ae610976750f9c5fdb4cf2b4cb1ea1cc84f2a1b06c751bdf85"
				}
			],
			"description":"A library providing C and Python (libcURL like) API to downloading repository\nmetadata.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/librepo@1.15.2-1.oe2409?arch=aarch64&epoch=0&upstream=librepo-1.15.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/librepo",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Repodata downloading library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.15.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7-7a8d9ada-f76d-4821-b7c1-172e5fec9cd0",
			"name":"libsolv",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"89eaa11fd5524cf2f10523106c3b6050d25e8d7513eceea75f8281e9193941bf"
				}
			],
			"description":"A free package dependency solver using a satisfiability algorithm. The\nlibrary is based on two major, but independent, blocks:\n\n- Using a dictionary approach to store and retrieve package\n  and dependency information.\n\n- Using satisfiability, a well known and researched topic, for\n  resolving package dependencies.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libsolv@0.7.24-4.oe2409?arch=aarch64&epoch=0&upstream=libsolv-0.7.24-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/libsolv",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Package dependency solver",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.7.24-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-83a65534-96ff-458d-9582-9bf22146e92f",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-0500689c-8dbe-4fcf-a25e-d3b0c476b4fe",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-3759c6f5-4e34-470e-888e-7f05c0d67f95",
			"name":"ostree",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e38ff7826343b6a9bde18799b287fc423570591290f3255ec4af04d2b22401f1"
				}
			],
			"description":"This project is now known as \"libostree\", though it is still appropriate to use the previous name: \"OSTree\"\n(or \"ostree\"). The focus is on projects which use libostree's shared library, rather than users directly\ninvoking the command line tools (except for build systems). However, in most of the rest of the documentation,\nwe will use the term \"OSTree\", since it's slightly shorter, and changing all documentation at once is impractical.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ostree@2024.6-1.oe2409?arch=aarch64&epoch=0&upstream=ostree-2024.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://ostreedev.github.io/ostree/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A tool like git for operating system binaries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2024.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-60b30632-4386-4fc1-91b0-c9506e3ae54f",
			"name":"polkit-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c963655efb1678b1d81d5177d150475560505684e9b55bc82056412a99b02cab"
				}
			],
			"description":"Libraries files for polkit.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/polkit-libs@125-1.oe2409?arch=aarch64&epoch=0&upstream=polkit-125-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://polkit.pages.freedesktop.org/polkit/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for polkit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:125-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-0602cf5a-4f3b-4529-8366-723abeead9f6",
			"name":"rpm-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"efa1910d5b244951efa6deb3b9e5fb86d6e0879a44f57263cb8abad733687b43"
				}
			],
			"description":"Shared library of rpm 4.18.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-libs@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared library of rpm 4.18",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396-7e7104f1-dc46-4a27-be8d-ec3c8e144aa5",
			"name":"rpm-ostree-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26f8c31360445b898957ff0ed813eda96fc8613732536b666904caf0fdfcbc5d"
				}
			],
			"description":"The rpm-ostree-libs package includes the shared library for rpm-ostree.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-ostree-libs@2024.4-2.oe2409?arch=aarch64&epoch=0&upstream=rpm-ostree-2024.4-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/coreos/rpm-ostree",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared library for rpm-ostree",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2024.4-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-skopeo-1.15.2-acb2fe80-b48d-4c0f-81a2-21635d59d896-6439d160-12a9-423f-8358-88a3c0cb615c",
			"name":"skopeo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"67496aa515294b7c669bc611e1684d29edadae23bb736065c4aeb326e7cb549b"
				}
			],
			"description":"A command line utility that performs various operations on container images and image repositories",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/skopeo@1.15.2-1.oe2409?arch=aarch64&epoch=1&upstream=skopeo-1.15.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/skopeo",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Work with remote images registries - retrieving information, images, signing content",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.15.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-c66a8353-0f93-47c1-bd16-26c89074096e",
			"name":"sqlite",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a81dd6ce0c927bbc00f9fa690bbe65ebb166781328b29018bd8b19bbcb535f4e"
				}
			],
			"description":"SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/sqlite@3.42.0-2.oe2409?arch=aarch64&epoch=0&upstream=sqlite-3.42.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.sqlite.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Embeded SQL database",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.42.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f7a0c449-29f8-42e0-9206-bbb19a6d1580",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-4d814906-f7fa-40e9-aa7f-6769351d36c4",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-c2124347-bf65-472e-8a23-eba388330329"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bubblewrap-0.8.0-03e04d67-152b-4f7c-b477-3aadecdc46be-27f410eb-63be-476f-8092-23e183817bd9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-49e0c40d-5034-40a8-931d-5ca31ba87977"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fuse-2.9.9-9e9b6554-4333-4224-b2b7-729df5438d39-40feb8de-42ec-426a-8b63-b9937a73d022"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-8a4a30f4-bd9d-4f26-a873-a62f0137d0a9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-2d9b3b3e-8691-421f-914a-d8b3891c3d7b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-8518daa8-c220-4f58-b889-87fa8238a154"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-103584d8-4c1b-4722-9629-4e16d6492a3c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-c66a48fa-a493-41a8-b9c7-760872df171a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-1f463cbb-e0f0-48e8-9676-9481027580ff"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcap-2.69-7ce44255-2200-417a-98d3-6f3cb1d31109-a1cf5488-8246-4e7f-bc4f-4ac4bc5f51ac"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-73ded70e-ae06-47d3-9f14-ca039774baac"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libmodulemd-2.15.0-2d8e2876-dbf5-4cb7-9fe8-5d7d5d627f9c-8dd21ab4-4192-4292-b2b7-7591380ec034"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-librepo-1.15.2-a2de74ff-d90f-49fc-9b00-2fd24174f719-ef37af6f-d437-4b0a-9104-344d5e611a6d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7-7a8d9ada-f76d-4821-b7c1-172e5fec9cd0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-83a65534-96ff-458d-9582-9bf22146e92f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-0500689c-8dbe-4fcf-a25e-d3b0c476b4fe"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-3759c6f5-4e34-470e-888e-7f05c0d67f95"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-polkit-libs-125-d6a83d91-4c55-43ba-9813-7218c52d72e4-60b30632-4386-4fc1-91b0-c9506e3ae54f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-0602cf5a-4f3b-4529-8366-723abeead9f6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396-7e7104f1-dc46-4a27-be8d-ec3c8e144aa5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-skopeo-1.15.2-acb2fe80-b48d-4c0f-81a2-21635d59d896-6439d160-12a9-423f-8358-88a3c0cb615c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-sqlite-3.42.0-8165fa80-2dbb-435b-9240-b6a73493b6aa-c66a8353-0f93-47c1-bd16-26c89074096e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f7a0c449-29f8-42e0-9206-bbb19a6d1580"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-2024.4-60d70f6d-c80f-4c34-9573-f1852a920c96",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-4d814906-f7fa-40e9-aa7f-6769351d36c4"
		}
	]
}