{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"ttfautohint-0.1.8.4-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/ttfautohint-0.1.8.4-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f308eb51-1500-46bc-b591-7cfb09eaa225",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-56b576a9-0374-4f01-b9ad-2239373397cb",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-7940c471-44b9-4924-836c-bada7aa7fa6c",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-f40e5030-9d27-4346-96b9-2489da513243",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-ea07bfae-af1b-499f-bf87-4c5de3342961",
			"name":"harfbuzz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"080faf1ef8626a5bef7425557815e74405c15a469edbb6c65e4b7f18973aa36b"
				}
			],
			"description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/harfbuzz@8.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=harfbuzz-8.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://harfbuzz.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A text shaping engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-8dabff24-4d56-4825-865f-bb84be2e57c1",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-c53c4c99-535c-4d08-bc61-d6b21ce1c4fd",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-qt5-qtbase-5.15.10-f7950453-9144-48bb-8c63-13f44ef085f3-6435b70b-1a09-4fa5-82d6-68d2c5a38300",
			"name":"qt5-qtbase",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0e43c279c496430729ba82ad5219eb6054e08133aa55a57145b95bccff96889d"
				}
			],
			"description":"Qt is a software toolkit for developing applications.\n\nThis package contains base tools, like string, xml, and network\nhandling.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/qt5-qtbase@5.15.10-9.oe2409?arch=aarch64&epoch=0&upstream=qt5-qtbase-5.15.10-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://qt-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Qt5 - QtBase components",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.15.10-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-qt5-qtbase-gui-5.15.10-29390efe-18ca-449c-b9a5-301cf4b58b0d-d013e0d2-b731-49ee-99c7-16f0bbe5e185",
			"name":"qt5-qtbase-gui",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9dbb77f27609413888953ab089427f45e1ebbfe7adeb623b804966d71a2820b9"
				}
			],
			"description":"Qt5 libraries used for drawing widgets and OpenGL items.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/qt5-qtbase-gui@5.15.10-9.oe2409?arch=aarch64&epoch=0&upstream=qt5-qtbase-5.15.10-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://qt-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Qt5 GUI-related libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.15.10-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ttfautohint-devel-1.8.4-9665454b-d42e-47fa-93db-d37967faaef5-3f100cfc-7cb0-44fa-8dca-66d6fcf213db",
			"name":"ttfautohint-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3c62c2893c8fa045a238e17fc1dcfaea1e7c7260886cece0a72948d282342e00"
				}
			],
			"description":"Development library files for ttfautohint.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ttfautohint-devel@1.8.4-1.oe2409?arch=aarch64&epoch=0&upstream=ttfautohint-1.8.4-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.freetype.org/ttfautohint",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development library for ttfautohint",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.4-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f308eb51-1500-46bc-b591-7cfb09eaa225"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-56b576a9-0374-4f01-b9ad-2239373397cb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-7940c471-44b9-4924-836c-bada7aa7fa6c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-f40e5030-9d27-4346-96b9-2489da513243"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-ea07bfae-af1b-499f-bf87-4c5de3342961"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-8dabff24-4d56-4825-865f-bb84be2e57c1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-c53c4c99-535c-4d08-bc61-d6b21ce1c4fd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-qt5-qtbase-5.15.10-f7950453-9144-48bb-8c63-13f44ef085f3-6435b70b-1a09-4fa5-82d6-68d2c5a38300"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-qt5-qtbase-gui-5.15.10-29390efe-18ca-449c-b9a5-301cf4b58b0d-d013e0d2-b731-49ee-99c7-16f0bbe5e185"
		},
		{
			"spdxElementId":"SPDXRef-rpm-ttfautohint-1.8.4-b5b52a3e-f811-4716-a2e6-e661e313832a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ttfautohint-devel-1.8.4-9665454b-d42e-47fa-93db-d37967faaef5-3f100cfc-7cb0-44fa-8dca-66d6fcf213db"
		}
	]
}