type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-25T18:33:37Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-25T18:33:37Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd889
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd890
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd77
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd78
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd185
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd878
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd879
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11153
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1127
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd892
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd893
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1017
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1018
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14171
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14172
from: taglib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd856
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd857
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd887
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd93
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1127
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd57
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd58
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd61
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5065
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5066
from: gstreamer1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd81
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd162
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8337
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd8338
from: gstreamer1-plugins-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1037
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1038
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8340
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd8341
from: gstreamer1-plugins-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd85
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd86
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1040
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1041
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14182
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14183
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd83
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd881
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd879
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd885
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd93
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1014
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1015
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14174
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14175
from: taglib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14179
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14180
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd853
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd854
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5062
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5063
from: gstreamer1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd185
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd158
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd159
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14162
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14164
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14157
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14160
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gstreamer1
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14155
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14176
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14178
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14158
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14165
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: taglib
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14159
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14163
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libvpx
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14177
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14156
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14161
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gstreamer1-plugins-base
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14154
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: gstreamer1-plugins-good
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1127
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd857
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd86
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd890
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14175
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5066
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1015
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd83
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1038
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd81
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8338
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd185
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd159
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd879
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd854
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14183
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1018
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8341
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5063
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd78
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd893
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14172
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14180
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd891
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd79
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8339
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14173
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1039
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5064
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd886
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd855
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1016
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14181
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd880
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14153
type: software_Package
supplied by: SPDXRef-gnrtd14181
software download location: NOASSERTION
summary: GStreamer plugins with good code and licensing
software package version: 0:1.20.3-5.oe2403sp1
software home page: http://gstreamer.freedesktop.org/
description: GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. GStreamer Good Plugins is a collection of well-supported plugins of good quality and under the LGPL license.
name: gstreamer1-plugins-good
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/gstreamer1-plugins-good@1.20.3-5.oe2403sp1?arch=x86_64&epoch=0&upstream=gstreamer1-plugins-good-1.20.3-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5056
type: software_Package
supplied by: SPDXRef-gnrtd5064
software download location: NOASSERTION
summary: Bindings for GStreamer 1.0, the open source multimedia framework
software package version: 0:1.22.5-3.oe2403sp1
software home page: https://gstreamer.freedesktop.org/
description: GStreamer1 implements a framework that allows for processing and encoding of multimedia sources in a manner similar to a shell pipeline. Because it's introspection-based, most of the classes follow directly from the C API. Therefore, most of the documentation is by example rather than a full breakdown of the class structure.
name: gstreamer1
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/gstreamer1@1.22.5-3.oe2403sp1?arch=x86_64&epoch=0&upstream=gstreamer1-1.22.5-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15
type: software_Package
supplied by: SPDXRef-gnrtd160
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd848
type: software_Package
supplied by: SPDXRef-gnrtd855
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1032
type: software_Package
supplied by: SPDXRef-gnrtd1039
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-5.oe2403sp1
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-5.oe2403sp1?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14166
type: software_Package
supplied by: SPDXRef-gnrtd14173
software download location: NOASSERTION
summary: Audio Meta-Data Library
software package version: 0:1.13.1-2.oe2403sp1
software home page: https://taglib.org/
description: TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack TrueAudio, WAV, AIFF, MP4 and ASF files.
name: taglib
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/taglib@1.13.1-2.oe2403sp1?arch=x86_64&epoch=0&upstream=taglib-1.13.1-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd55
type: software_Package
supplied by: SPDXRef-gnrtd59
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1010
type: software_Package
supplied by: SPDXRef-gnrtd1016
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/cairo-gobject@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd181
type: software_Package
supplied by: SPDXRef-gnrtd186
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp1
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/bzip2@1.0.8-9.oe2403sp1?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd871
type: software_Package
supplied by: SPDXRef-gnrtd891
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd883
type: software_Package
supplied by: SPDXRef-gnrtd886
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403sp1
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/libX11@1.8.7-3.oe2403sp1?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd875
type: software_Package
supplied by: SPDXRef-gnrtd880
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403sp1
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8313
type: software_Package
supplied by: SPDXRef-gnrtd8339
software download location: NOASSERTION
summary: GStreamer streaming media framework base plugins
software package version: 0:1.22.5-3.oe2403sp1
software home page: http://gstreamer.freedesktop.org/
description: GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.
name: gstreamer1-plugins-base
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/gstreamer1-plugins-base@1.22.5-3.oe2403sp1?arch=x86_64&epoch=0&upstream=gstreamer1-plugins-base-1.22.5-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11148
type: software_Package
supplied by: SPDXRef-gnrtd11154
software download location: NOASSERTION
summary: VP8/VP9 Video Codec SDK
software package version: 0:1.13.1-4.oe2403sp1
software home page: http://www.webmproject.org/code/
description: libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.
name: libvpx
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/libvpx@1.13.1-4.oe2403sp1?arch=x86_64&epoch=0&upstream=libvpx-1.13.1-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76
type: software_Package
supplied by: SPDXRef-gnrtd79
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: software_Package
supplied by: SPDXRef-gnrtd84
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0