type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-01T18:38:11Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-01T18:38:11Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-065cdb86-92d6-44ef-a3d7-6aee26e8d762-specv3/SPDXRef-gnrtd52
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd42
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd43
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35298
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd18570
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd305
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd306
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd78
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd79
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd145
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd146
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5089
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5090
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18455
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd18456
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd153
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd154
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd179
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd180
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd122
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd120
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5092
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5093
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd764
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd29
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd762
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd29
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd176
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd177
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd247
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd248
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd148
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd149
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd30794
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd120
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd81
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd82
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18458
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd18459
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd308
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd306
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd431
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd432
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35300
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd18570
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd150
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd151
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd18570
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd914
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd915
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd30792
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd120
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd250
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd251
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd119
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd120
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd911
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd912
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35284
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd18570
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd434
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd435
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd49
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd50
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd126
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd127
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd130
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35289
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35285
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35290
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35287
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35276
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35288
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35296
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35292
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35297
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35295
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35294
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35286
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35275
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35274
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35277
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35293
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35291
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd154
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd435
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd251
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5093
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd915
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd912
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd43
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd180
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd50
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd130
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd120
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18456
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18459
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd149
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd151
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd306
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd177
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5090
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18570
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd79
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd432
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd127
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd146
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd248
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd147
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35283
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5091
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd152
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd128
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd41
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd433
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd307
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd121
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd30793
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd913
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd763
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35299
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd178
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18457
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd249
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd225
type: software_Package
supplied by: SPDXRef-gnrtd249
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-10.oe2403sp1
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/libarchive@3.7.1-10.oe2403sp1?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5085
type: software_Package
supplied by: SPDXRef-gnrtd5091
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-2.oe2403sp1
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/polkit-libs@123-2.oe2403sp1?arch=x86_64&epoch=0&upstream=polkit-123-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: software_Package
supplied by: SPDXRef-gnrtd51
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd760
type: software_Package
supplied by: SPDXRef-gnrtd763
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp1
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/json-c@0.17-7.oe2403sp1?arch=x86_64&epoch=0&upstream=json-c-0.17-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd30789
type: software_Package
supplied by: SPDXRef-gnrtd30793
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp1
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/skopeo@1.14.2-6.oe2403sp1?arch=x86_64&epoch=1&upstream=skopeo-1.14.2-6.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7
type: software_Package
supplied by: SPDXRef-gnrtd152
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd257
type: software_Package
supplied by: SPDXRef-gnrtd307
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-32.oe2403sp1
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/rpm-libs@4.18.2-32.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84
type: software_Package
supplied by: SPDXRef-gnrtd121
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.0.12-22.oe2403sp1
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.0.12-22.oe2403sp1?arch=x86_64&epoch=1&upstream=openssl-3.0.12-22.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35278
type: software_Package
supplied by: SPDXRef-gnrtd35283
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree-libs@2024.4-7.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd906
type: software_Package
supplied by: SPDXRef-gnrtd913
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd147
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd426
type: software_Package
supplied by: SPDXRef-gnrtd433
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403sp1
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/sqlite@3.42.0-4.oe2403sp1?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd38
type: software_Package
supplied by: SPDXRef-gnrtd41
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: software_Package
supplied by: SPDXRef-gnrtd178
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-43.oe2403sp1
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-43.oe2403sp1?arch=x86_64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18447
type: software_Package
supplied by: SPDXRef-gnrtd18457
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp1
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/libsolv@0.7.24-5.oe2403sp1?arch=x86_64&epoch=0&upstream=libsolv-0.7.24-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35273
type: software_Package
supplied by: SPDXRef-gnrtd35299
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree@2024.4-7.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd128
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58
type: software_Package
supplied by: SPDXRef-gnrtd80
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-4.oe2403sp1
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/49812e1cb655fdb98aae3f2bca46c110f68209046fc0d0ee105a88e91d47c87d-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-4.oe2403sp1?arch=x86_64&epoch=0&upstream=libcap-2.69-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1