{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"totem-pl-parser-0.3.26.6-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/totem-pl-parser-0.3.26.6-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-9effbee9-bc85-4ca4-88ab-d886bd8b5595",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8e8d131e-95fc-4b03-8d8b-4528a33bb69f",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-7b536d3b-e7bf-4588-9753-a6657f682cd6",
			"name":"libarchive",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2a754f7a591f20e6e179967f17a3a030c21c94c4a11c99b1c9eaa64252d34a0"
				}
			],
			"description":"libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libarchive@3.7.1-3.oe2409?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.libarchive.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Multi-format archive and compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.7.1-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcrypt-1.10.2-9ef8ecfc-dfe7-4c78-b77c-bdf678a7b2e5-ec38ff2f-b183-4475-b7b4-36b7d9b645ba",
			"name":"libgcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"38d0d5ac5204da894ca84c645f24862e77abec29922748bead302e4fd8e6eb1d"
				}
			],
			"description":"Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcrypt@1.10.2-1.oe2409?arch=aarch64&epoch=0&upstream=libgcrypt-1.10.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general-purpose cryptography library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.10.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-656ba580-c35e-4ca1-8572-e6779e88d2cf",
			"name":"libxml2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd"
				}
			],
			"description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlsoft.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library providing XML and HTML support",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-uchardet-0.0.8-8adccea4-dc75-42ed-99a3-9be2d46169a9-f0877ae1-5295-4498-b539-732ca0800c85",
			"name":"uchardet",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"35f369df34dec096928c7827e275783293582213571f9d8aa42ec8d61392bb32"
				}
			],
			"description":"Uchardet is a C language binding of the original C++ implementation of the\nuniversal charset detection library by Mozilla. Uchardet is an encoding\ndetector library, which takes a sequence of bytes in an unknown character\nencoding without any additional information, and attempts to determine the\nencoding of the text.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/uchardet@0.0.8-1.oe2409?arch=aarch64&epoch=0&upstream=uchardet-0.0.8-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freedesktop.org/wiki/Software/uchardet",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An encoding detector library ported from Mozilla",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.0.8-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-9effbee9-bc85-4ca4-88ab-d886bd8b5595"
		},
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8e8d131e-95fc-4b03-8d8b-4528a33bb69f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libarchive-3.7.1-56c74090-1fac-4bcb-bdfe-1fe6a437327c-7b536d3b-e7bf-4588-9753-a6657f682cd6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcrypt-1.10.2-9ef8ecfc-dfe7-4c78-b77c-bdf678a7b2e5-ec38ff2f-b183-4475-b7b4-36b7d9b645ba"
		},
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-656ba580-c35e-4ca1-8572-e6779e88d2cf"
		},
		{
			"spdxElementId":"SPDXRef-rpm-totem-pl-parser-3.26.6-781c81d2-cbeb-4dc1-ab4b-201a1ae308ab",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-uchardet-0.0.8-8adccea4-dc75-42ed-99a3-9be2d46169a9-f0877ae1-5295-4498-b539-732ca0800c85"
		}
	]
}