type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-08T18:37:56Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-08T18:37:56Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-b6bfb2a1-4f9a-4f20-a96a-8312bc1ad0da-specv3/SPDXRef-gnrtd139
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd140
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd232
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd230
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd112
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd113
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5445
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5446
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5442
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5443
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd102
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd105
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd106
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31731
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd332
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd333
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd329
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd330
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd142
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd143
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd75
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd76
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd605
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd606
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd229
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd230
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd66
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd67
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd930
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd931
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd157
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd933
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd934
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36289
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19446
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19331
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19332
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd766
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd768
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd398
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd399
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd608
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd609
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd395
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd396
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31729
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36287
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19446
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19334
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19335
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd73
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd115
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd116
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd159
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd160
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36300
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19446
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36302
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19446
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36290
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36294
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36291
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36292
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36276
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36295
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36297
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36281
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36280
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36296
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36299
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36282
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36277
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36279
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36298
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36293
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36278
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd157
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19332
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd330
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd931
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19446
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd609
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd399
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5446
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd140
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd396
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd230
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd103
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd116
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd106
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd143
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5443
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd934
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19335
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd606
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd333
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd607
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36288
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd767
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd932
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd114
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd231
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36301
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd158
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd104
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19333
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd397
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31730
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5444
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd331
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd108
type: software_Package
supplied by: SPDXRef-gnrtd137
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.0.12-22.oe2403sp1
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.0.12-22.oe2403sp1?arch=x86_64&epoch=1&upstream=openssl-3.0.12-22.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36275
type: software_Package
supplied by: SPDXRef-gnrtd36301
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree@2024.4-7.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: software_Package
supplied by: SPDXRef-gnrtd104
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-4.oe2403sp1
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-4.oe2403sp1?arch=x86_64&epoch=0&upstream=libcap-2.69-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19323
type: software_Package
supplied by: SPDXRef-gnrtd19333
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp1
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libsolv@0.7.24-5.oe2403sp1?arch=x86_64&epoch=0&upstream=libsolv-0.7.24-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13
type: software_Package
supplied by: SPDXRef-gnrtd158
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd925
type: software_Package
supplied by: SPDXRef-gnrtd932
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd114
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd314
type: software_Package
supplied by: SPDXRef-gnrtd331
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-10.oe2403sp1
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libarchive@3.7.1-10.oe2403sp1?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd381
type: software_Package
supplied by: SPDXRef-gnrtd397
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-43.oe2403sp1
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-43.oe2403sp1?arch=x86_64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36283
type: software_Package
supplied by: SPDXRef-gnrtd36288
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree-libs@2024.4-7.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: software_Package
supplied by: SPDXRef-gnrtd74
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd764
type: software_Package
supplied by: SPDXRef-gnrtd767
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp1
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/json-c@0.17-7.oe2403sp1?arch=x86_64&epoch=0&upstream=json-c-0.17-7.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: software_Package
supplied by: SPDXRef-gnrtd65
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd168
type: software_Package
supplied by: SPDXRef-gnrtd231
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-32.oe2403sp1
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/rpm-libs@4.18.2-32.oe2403sp1?arch=x86_64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31726
type: software_Package
supplied by: SPDXRef-gnrtd31730
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp1
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/skopeo@1.14.2-6.oe2403sp1?arch=x86_64&epoch=1&upstream=skopeo-1.14.2-6.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5438
type: software_Package
supplied by: SPDXRef-gnrtd5444
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-2.oe2403sp1
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/polkit-libs@123-2.oe2403sp1?arch=x86_64&epoch=0&upstream=polkit-123-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd600
type: software_Package
supplied by: SPDXRef-gnrtd607
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403sp1
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/sqlite@3.42.0-4.oe2403sp1?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd27
type: software_Package
supplied by: SPDXRef-gnrtd141
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0