type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-15T19:02:28Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-15T19:02:28Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-5c5142dd-2c4a-4138-93e7-db2e15f6135f-specv3/SPDXRef-gnrtd9080
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd107
from: mesa-libgbm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd124
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd125
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd66
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1007
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1008
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1037
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1038
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11899
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd715
from: ffmpeg
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd418
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd419
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12550
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd12551
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11897
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd715
from: ffmpeg
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1000
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd107
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11879
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd186
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11877
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd186
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd127
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd128
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd139
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5706
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5707
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1002
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd107
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd156
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12553
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd12554
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd153
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1122
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1123
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1004
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1005
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd415
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd416
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd107
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1026
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd107
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5709
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5710
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1132
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1133
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd118
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd119
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd63
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1119
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1120
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1135
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1136
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9078
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd107
from: mesa-libgbm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1035
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd121
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd122
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12547
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12545
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12539
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: mesa-libgbm
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12546
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12542
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12534
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12548
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12537
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libvpx
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12540
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ffmpeg
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12549
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12535
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12543
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: alsa-lib
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12536
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12541
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12544
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12538
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd125
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd122
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1123
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd419
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1005
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5710
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1133
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1136
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5707
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd416
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd128
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1008
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd66
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1035
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND (FTL OR GPL-2.0-or-later) AND MIT AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1038
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd715
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1120
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12554
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later OR MPL-1.1 OR GPL-2.0-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12551
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later OR MPL-1.1 OR GPL-2.0-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd119
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd153
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd126
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11878
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1134
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9079
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11898
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1006
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1036
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12552
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1001
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5708
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd417
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd120
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1121
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd117
type: software_Package
supplied by: SPDXRef-gnrtd120
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd998
type: software_Package
supplied by: SPDXRef-gnrtd1001
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403sp1
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd988
type: software_Package
supplied by: SPDXRef-gnrtd1036
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403sp1
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd154
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1128
type: software_Package
supplied by: SPDXRef-gnrtd1134
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: software_Package
supplied by: SPDXRef-gnrtd64
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12533
type: software_Package
supplied by: SPDXRef-gnrtd12552
software download location: NOASSERTION
summary: Mozilla Firefox Web browser
software package version: 0:140.5.0-1.oe2403sp1
software home page: https://www.mozilla.org/firefox/
description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.
name: firefox
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd993
type: software_Package
supplied by: SPDXRef-gnrtd1006
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1114
type: software_Package
supplied by: SPDXRef-gnrtd1121
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-5.oe2403sp1
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23
type: software_Package
supplied by: SPDXRef-gnrtd137
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: software_Package
supplied by: SPDXRef-gnrtd1027
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403sp1
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9075
type: software_Package
supplied by: SPDXRef-gnrtd9079
software download location: NOASSERTION
summary: Mesa gbm runtime library
software package version: 0:24.0.3-5.oe2403sp1
software home page: http://www.mesa3d.org
description: Mesa gbm runtime library.
name: mesa-libgbm
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11826
type: software_Package
supplied by: SPDXRef-gnrtd11898
software download location: NOASSERTION
summary: Digital VCR and streaming server
software package version: 0:6.1.1-20.oe2403sp1
software home page: http://ffmpeg.org/
description: FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.
name: ffmpeg
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5703
type: software_Package
supplied by: SPDXRef-gnrtd5708
software download location: NOASSERTION
summary: the user space library that developers compile ALSA applications against
software package version: 0:1.2.10-4.oe2403sp1
software home page: https://alsa-project.org/
description: The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib
name: alsa-lib
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11872
type: software_Package
supplied by: SPDXRef-gnrtd11878
software download location: NOASSERTION
summary: VP8/VP9 Video Codec SDK
software package version: 0:1.13.1-4.oe2403sp1
software home page: http://www.webmproject.org/code/
description: libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.
name: libvpx
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd115
type: software_Package
supplied by: SPDXRef-gnrtd126
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd410
type: software_Package
supplied by: SPDXRef-gnrtd417
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1