{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"rpm-ostree-libs-0.2024.4-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/rpm-ostree-libs-0.2024.4-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-4aa48528-7fd3-4609-80eb-078d62e6b9dd",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-66848417-56a5-4701-9bb8-fac34cfd80a0",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-f32df463-4809-429b-b417-807566be19ce",
			"name":"json-glib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d142d050f535557e0c4b4d1a40c913b4262eae719fe248709005713d56c89e57"
				}
			],
			"description":"JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-glib@1.8.0-1.oe2409?arch=aarch64&epoch=0&upstream=json-glib-1.8.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/JsonGlib",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for lightweight data-interchange format",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-06b51ca3-84a8-4e37-a049-5017aaaba727",
			"name":"ostree",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e38ff7826343b6a9bde18799b287fc423570591290f3255ec4af04d2b22401f1"
				}
			],
			"description":"This project is now known as \"libostree\", though it is still appropriate to use the previous name: \"OSTree\"\n(or \"ostree\"). The focus is on projects which use libostree's shared library, rather than users directly\ninvoking the command line tools (except for build systems). However, in most of the rest of the documentation,\nwe will use the term \"OSTree\", since it's slightly shorter, and changing all documentation at once is impractical.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ostree@2024.6-1.oe2409?arch=aarch64&epoch=0&upstream=ostree-2024.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://ostreedev.github.io/ostree/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A tool like git for operating system binaries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2024.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-popt-1.19-330c1fa5-2f14-4a3c-b8d0-a2e9c13225e8-ad440b9b-93e6-4fbf-af39-dc2c2100d924",
			"name":"popt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c3cde9366643c2b9436e4a7d2d9cc24074e47e2a783435a955e91a816e63f55a"
				}
			],
			"description":"The popt library exists essentially for parsing command line options. Some\nspecific advantages of popt are no global variables (allowing multiple passes\nin parsing argv), parsing an arbitrary array of argv-style elements (allowing\nparsing of command-line-strings from any source), a standard method of option\naliasing, ability to exec external option filters, and automatic generation\nof help and usage messages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/popt@1.19-4.oe2409?arch=aarch64&epoch=0&upstream=popt-1.19-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rpm-software-management/popt/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C library for parsing command line parameters",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.19-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-774ab719-88b2-4e52-858b-a33f1535547a",
			"name":"rpm-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"efa1910d5b244951efa6deb3b9e5fb86d6e0879a44f57263cb8abad733687b43"
				}
			],
			"description":"Shared library of rpm 4.18.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-libs@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared library of rpm 4.18",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-4aa48528-7fd3-4609-80eb-078d62e6b9dd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-66848417-56a5-4701-9bb8-fac34cfd80a0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-glib-1.8.0-53452c0b-0474-423e-87db-11c0df15c0e8-f32df463-4809-429b-b417-807566be19ce"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ostree-2024.6-53639dba-447a-4f29-97a9-079c8e28a8de-06b51ca3-84a8-4e37-a049-5017aaaba727"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-popt-1.19-330c1fa5-2f14-4a3c-b8d0-a2e9c13225e8-ad440b9b-93e6-4fbf-af39-dc2c2100d924"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpm-ostree-libs-2024.4-02d30007-5baa-4b3d-b9ee-19149d746396",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-774ab719-88b2-4e52-858b-a33f1535547a"
		}
	]
}