{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"wget-0.1.21.4-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/wget-0.1.21.4-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-d35d204b-f027-4c02-995f-d2089f7e344f",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-f6642136-00d4-4916-a082-97597d44d96c",
			"name":"gnutls",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"25d106732688d10e2195bfc8abf51987a13871c0e44ebf5c75b305c0e22812a1"
				}
			],
			"description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnutls@3.8.2-4.oe2409?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnutls.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU Secure Communication Protocol Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-19ba1eca-560a-406d-9e36-278fd6325b04",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-1e6bd357-01cd-4e03-99ef-5d1f432ee1f1",
			"name":"libidn2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f0dcd7caa33c86d583f80c1085e0b0784879b9e826593eb208ab71b55d323c12"
				}
			],
			"description":"Libidn2 is a free software implementation of IDNA2008, Punycode and TR46.\nIts purpose is to encode and decode internationalized domain names.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libidn2@2.3.7-1.oe2409?arch=aarch64&epoch=0&upstream=libidn2-2.3.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/libidn/#libidn2",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU IDN Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libmetalink-0.1.3-f4939ac8-9540-47a4-a133-1761b70bb9d7-08492de3-81ec-4bea-b9c9-90587506ae50",
			"name":"libmetalink",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"edd86d02a721cb6be19c316018a3022bd4e4ed322647532a5630812f84f06106"
				}
			],
			"description":"libmetalink is a Metalink library written in C language. It is intended to\nprovide the programs written in C to add Metalink functionality such as\nparsing Metalink XML files.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libmetalink@0.1.3-12.oe2409?arch=aarch64&epoch=0&upstream=libmetalink-0.1.3-12.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://launchpad.net/libmetalink",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Metalink library written in C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.1.3-12.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libpsl-0.21.2-767d9955-85e5-4aa8-8237-b7767cb64d96-1387bd69-7c4d-4d07-8ca9-5897850c3a64",
			"name":"libpsl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c38821d56f514ec54c3d0ad9fc97c32a6aa662a45c9674b5390a64d0835413d7"
				}
			],
			"description":"Libpsl is a C library to handle the Public Suffix List. A Public Suffix List is a\ncollection of Top Level Domains (TLDs) suffixes. Some of the features are listed as\nfollows:\n\n- has built-in PSL data for fast access;\n- allows to load PSL data from files;\n- checks if a given domain is a \"public suffix\";\n- provides immediate cookie domain verification;\n- finds the longest public part of a given domain;\n- finds the shortest private part of a given domain;\n- works with international domains (UTF-8 and IDNA2008 Punycode);\n- is thread-safe;\n- handles IDNA2008 UTS#46 (if libicu is available);",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libpsl@0.21.2-2.oe2409?arch=aarch64&epoch=0&upstream=libpsl-0.21.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rockdaboot/libpsl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C library to handle the Public Suffix List",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.21.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libuuid-2.39.1-877493ac-b7b9-4ce7-a8f3-c4004d9badae-087884c2-9730-4e06-b2a6-72739f2714ec",
			"name":"libuuid",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d894a0ecd13293d426f9e20261518ab3529153da1521fb7d45e50dfbb9fec404"
				}
			],
			"description":"This package is the universally unique ID library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libuuid@2.39.1-13.oe2409?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Universally unique ID library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.39.1-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-3dd4566a-30a9-412e-9c9d-bfffbf8d5750",
			"name":"nettle",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2c589b03786dd2cbab8dd084545b0e71eec93333a3d336f87b82f6559073729b"
				}
			],
			"description":"Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/nettle@3.8.1-1.oe2409?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.lysator.liu.se/~nisse/nettle/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A low-level cryptographic library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-e52c4a8e-94fd-43d7-82c2-ef9672f07cff",
			"name":"pcre2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"63b16a0eebb21b4266321ddd621236057efc7045b85cfe771148d2629b89eb8d"
				}
			],
			"description":"PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pcre2@10.42-9.oe2409?arch=aarch64&epoch=0&upstream=pcre2-10.42-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.pcre.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Perl Compatible Regular Expressions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.42-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-ffd50c67-65d5-4c70-b1d6-ba3215f8444a",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-d35d204b-f027-4c02-995f-d2089f7e344f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-f6642136-00d4-4916-a082-97597d44d96c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-19ba1eca-560a-406d-9e36-278fd6325b04"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-1e6bd357-01cd-4e03-99ef-5d1f432ee1f1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libmetalink-0.1.3-f4939ac8-9540-47a4-a133-1761b70bb9d7-08492de3-81ec-4bea-b9c9-90587506ae50"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libpsl-0.21.2-767d9955-85e5-4aa8-8237-b7767cb64d96-1387bd69-7c4d-4d07-8ca9-5897850c3a64"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libuuid-2.39.1-877493ac-b7b9-4ce7-a8f3-c4004d9badae-087884c2-9730-4e06-b2a6-72739f2714ec"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-3dd4566a-30a9-412e-9c9d-bfffbf8d5750"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-e52c4a8e-94fd-43d7-82c2-ef9672f07cff"
		},
		{
			"spdxElementId":"SPDXRef-rpm-wget-1.21.4-915ae1fe-0526-4bfe-bb78-2576027abe03",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-ffd50c67-65d5-4c70-b1d6-ba3215f8444a"
		}
	]
}