type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-25T18:33:37Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-25T18:33:37Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd260
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd261
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd255
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd263
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd264
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd255
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd225
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd223
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd11
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9567
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9568
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9564
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7457
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7458
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7440
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9577
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9578
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9574
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9575
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9570
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9568
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9564
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd222
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd223
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd11
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7460
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7461
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7440
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9572
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7440
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9571
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd255
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9573
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd11
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9563
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9564
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9578
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9568
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-3.0-or-later
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9575
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7458
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd264
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 or BSD
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7461
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd223
type: simplelicensing_LicenseExpression
simplelicensing license expression: Python-2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 or BSD
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd262
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9569
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd224
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7459
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9576
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9564
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9569
software download location: NOASSERTION
summary: Implementation of JOSE Web standards
software package version: 0:1.5.0-4.oe2403sp1
software home page: https://github.com/latchset/jwcrypto
description: Implements JWK, JWS, JWE specifications with python-cryptography
name: python3-jwcrypto
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd11
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd224
software download location: NOASSERTION
summary: Interpreter of the Python3 programming language
software package version: 0:3.11.6-11.oe2403sp1
software home page: https://www.python.org/
description: Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. This package Provides python version 3.
name: python3
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/python3@3.11.6-11.oe2403sp1?arch=x86_64&epoch=0&upstream=python3-3.11.6-11.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7440
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd7459
software download location: NOASSERTION
summary: Awesome Python HTTP Library That's Actually Usable
software package version: 0:2.31.0-3.oe2403sp1
software home page: http://python-requests.org/
description: Requests is an ISC Licensed HTTP library, written in Python, for human beings. Most existing Python modules for sending HTTP requests are extremely verbose and cumbersome. Python's builtin urllib2 module provides most of the HTTP capabilities you should need, but the api is thoroughly broken. It requires an enormous amount of work (even method overrides) to perform the simplest of tasks.
name: python3-requests
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9562
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd9576
software download location: NOASSERTION
summary: Sub-package with python3 custodia modules
software package version: 0:0.6.0-9.oe2403sp1
software home page: https://github.com/latchset/custodia
description: Sub-package with python custodia modules Custodia is a project that aims to define an API for modern cloud applications that allows to easily store and share password,tokens,certificates and any other secret in a way that keeps data secure, manageable and auditable. Custodia is modular, the configuration file controls how authentication, authorization, storage and API plugins are combined and exposed.
name: python3-custodia
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd255
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd262
software download location: NOASSERTION
summary: PyCA's cryptography library
software package version: 0:42.0.2-7.oe2403sp1
software home page: https://cryptography.io/en/latest/
description: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
name: python3-cryptography
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/python3-cryptography@42.0.2-7.oe2403sp1?arch=x86_64&epoch=0&upstream=python-cryptography-42.0.2-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0