{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"sos-0.4.7.2-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/sos-0.4.7.2-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-0c99e282-3f7d-4f77-9376-1c6c456fa61d",
			"name":"bzip2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"01489c08d9921a6c60c57c90b84c8d11fc02c1860f45c6f009bf535704baa64c"
				}
			],
			"description":"bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bzip2@1.0.8-8.oe2409?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.sourceware.org/bzip2/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-quality data compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.8-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-3.11.6-46a48388-2814-4f07-af71-9388edc427ec-c21252f4-bbc6-4a3e-ab47-437148ac3d02",
			"name":"python3",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"08bd7937d659d460eb57f421500cb0fd93e554c236a1ca9b5bb9efdd64c21d48"
				}
			],
			"description":"Python combines remarkable power with very clear syntax. It has modules,\nclasses, exceptions, very high level dynamic data types, and dynamic\ntyping. There are interfaces to many system calls and libraries, as well\nas to various windowing systems. New built-in modules are easily written\nin C or C++ (or other languages, depending on the chosen implementation).\nPython is also usable as an extension language for applications written\nin other languages that need easy-to-use scripting or automation interfaces.\n\nThis package Provides python version 3.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3@3.11.6-5.oe2409?arch=aarch64&epoch=0&upstream=python3-3.11.6-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.python.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Interpreter of the Python3 programming language",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.11.6-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-magic-5.45-2047f131-1f75-49b6-8fbc-99de6973a830-a59febd2-8929-4530-8a16-1bec99a58325",
			"name":"python3-magic",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f9d425431aaefae63395e3ab875d569c1085d659f25f4ef6a0bf447f1e1c9bb2"
				}
			],
			"description":"This package contains the Python 3 bindings to access to the libmagic\nAPI. The libmagic library is also used by the familiar file(1) command.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-magic@5.45-1.oe2409?arch=noarch&epoch=0&upstream=file-5.45-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.darwinsys.com/file/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Python 3 bindings for the libmagic API",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.45-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-packaging-23.2-51fb1ba9-e18d-47df-8e0f-8200c6c4bece-84bc0728-f284-4015-8457-2adc751fd2e8",
			"name":"python3-packaging",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"02f2172a31dbb4fa24d71f6fc2b4f1128d591279ee3d1b1d925e4dbf8e050bac"
				}
			],
			"description":"Reusable core utilities for various Python Packaging interoperability specifications.\n\nThis library provides utilities that implement the interoperability specifications which have clearly one correct behaviour (eg: PEP 440) or benefit greatly from having a single shared implementation (eg: PEP 425).\n\nThe packaging project includes the following: version handling, specifiers, markers, requirements, tags, utilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-packaging@23.2-1.oe2409?arch=noarch&epoch=0&upstream=python-packaging-23.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/pypa/packaging",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Core utilities for Python packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:23.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-pexpect-4.8.0-ef58e2fc-7eae-473d-83e4-93e6a326315e-28b5c01c-fcca-41c4-b71a-230af0735342",
			"name":"python3-pexpect",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"508857b73a1ebff2b122d146415e9787afbfd3ad21de06bd9497a9f44317bade"
				}
			],
			"description":"Pexpect is a pure Python module for spawning child applications; controlling\nthem; and responding to expected patterns in their output. Pexpect works like\nDon Libes' Expect. Pexpect allows your script to spawn a child application and\ncontrol it as if a human were typing commands.\n\nPexpect can be used for automating interactive applications such as ssh, ftp,\npasswd, telnet, etc. It can be used to a automate setup scripts for duplicating\nsoftware package installations on different servers. It can be used for\nautomated software testing. Pexpect is in the spirit of Don Libes' Expect, but\nPexpect is pure Python.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-pexpect@4.8.0-2.oe2409?arch=noarch&epoch=0&upstream=python-pexpect-4.8.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pexpect.readthedocs.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Pexpect allows easy control of interactive console applications.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.8.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-pyyaml-6.0.1-65ab7291-0f95-4fb3-9a3f-476dcb93ac24-cc55f1d5-8722-4a46-8e3f-02d4e454f8c7",
			"name":"python3-pyyaml",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2325b5bf4f9474152a80fee6bcd921934853b70bc68b417151d9a75b3cd50a5f"
				}
			],
			"description":"YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. PyYAML is a YAML parser and emitter for\nPython.\n\nPyYAML features a complete YAML 1.1 parser, Unicode support, pickle support,\ncapable extension API, and sensible error messages. PyYAML supports standard\nYAML tags and provides Python-specific tags that allow to represent an\narbitrary Python object.\n\nPyYAML is applicable for a broad range of tasks from complex configuration\nfiles to object serialization and persistence.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-pyyaml@6.0.1-2.oe2409?arch=aarch64&epoch=0&upstream=pyYAML-6.0.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/yaml/pyyaml",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"YAML parser and emitter for Python",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.0.1-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-python3-rpm-4.18.2-72d89bbf-2bef-4064-80c0-1e369673af06-4e83a632-152b-49a5-b129-ef27265384a3",
			"name":"python3-rpm",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0d1f49ce093125d0bffed4e590b064c6b297c510bce174236f4e84469eada74f"
				}
			],
			"description":"This package contains a module that allow applications\nwritten with Python3 to use the interface\nsupplied by RPM.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/python3-rpm@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Python3 bindings for RPM user",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-28b687ab-499a-410a-a270-37b6d487f9f9",
			"name":"tar",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a2cd91ffa50e3b1e20180ee00c53e72dbb47a8db59af2119dc7b0cb4bbd743b8"
				}
			],
			"description":"GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tar@1.35-2.oe2409?arch=aarch64&epoch=2&upstream=tar-1.35-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/tar/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An organized and systematic method of controlling a large amount of data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.35-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-8bd7fa1e-237b-4bb8-964f-7caf1b477aee",
			"name":"xz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b0c5487eac6e3c3027f4ce0fdd9dbcb76909417529dacc4433dbc281170f1aef"
				}
			],
			"description":"XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A free general-purpose data compreession software with LZMA2 algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-0c99e282-3f7d-4f77-9376-1c6c456fa61d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-3.11.6-46a48388-2814-4f07-af71-9388edc427ec-c21252f4-bbc6-4a3e-ab47-437148ac3d02"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-magic-5.45-2047f131-1f75-49b6-8fbc-99de6973a830-a59febd2-8929-4530-8a16-1bec99a58325"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-packaging-23.2-51fb1ba9-e18d-47df-8e0f-8200c6c4bece-84bc0728-f284-4015-8457-2adc751fd2e8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-pexpect-4.8.0-ef58e2fc-7eae-473d-83e4-93e6a326315e-28b5c01c-fcca-41c4-b71a-230af0735342"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-pyyaml-6.0.1-65ab7291-0f95-4fb3-9a3f-476dcb93ac24-cc55f1d5-8722-4a46-8e3f-02d4e454f8c7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-python3-rpm-4.18.2-72d89bbf-2bef-4064-80c0-1e369673af06-4e83a632-152b-49a5-b129-ef27265384a3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-28b687ab-499a-410a-a270-37b6d487f9f9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-sos-4.7.2-44c87d1d-dfc4-4da7-89a8-51033b735eaa",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-8bd7fa1e-237b-4bb8-964f-7caf1b477aee"
		}
	]
}