type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-15T19:02:28Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-15T19:02:28Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-5c5142dd-2c4a-4138-93e7-db2e15f6135f-specv3/SPDXRef-gnrtd67
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd68
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd337
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd338
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd70
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd68
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36465
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19574
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd124
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd125
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd66
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19462
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19463
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd418
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd419
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd489
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd490
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36482
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19574
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd784
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd107
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd96
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd127
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd128
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd264
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd139
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd513
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5517
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5518
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36480
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19574
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5520
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5521
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd782
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd107
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd93
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd156
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd153
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd509
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd510
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd492
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd490
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31871
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd68
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31873
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd68
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd415
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd416
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd340
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd341
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36463
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19574
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19459
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19460
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd267
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd118
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd119
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd63
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd121
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd122
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36468
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36473
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36477
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36467
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36466
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36457
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36478
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36476
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36469
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36475
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36458
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36479
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36472
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36470
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36471
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36456
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36474
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19463
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd68
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19460
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd125
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd341
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd267
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd122
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5521
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd419
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5518
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19574
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd416
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd338
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd128
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd66
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd264
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd510
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd490
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd119
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd153
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd126
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd783
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36464
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36481
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd491
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31872
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5519
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19461
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd339
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd417
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd120
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd511
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36459
type: software_Package
supplied by: SPDXRef-gnrtd36464
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25
type: software_Package
supplied by: SPDXRef-gnrtd69
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.0.12-22.oe2403sp1
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd117
type: software_Package
supplied by: SPDXRef-gnrtd120
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5513
type: software_Package
supplied by: SPDXRef-gnrtd5519
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-2.oe2403sp1
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd330
type: software_Package
supplied by: SPDXRef-gnrtd339
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-43.oe2403sp1
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd154
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd780
type: software_Package
supplied by: SPDXRef-gnrtd783
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp1
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: software_Package
supplied by: SPDXRef-gnrtd64
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: software_Package
supplied by: SPDXRef-gnrtd94
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-4.oe2403sp1
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36455
type: software_Package
supplied by: SPDXRef-gnrtd36481
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: software_Package
supplied by: SPDXRef-gnrtd491
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-32.oe2403sp1
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd258
type: software_Package
supplied by: SPDXRef-gnrtd265
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403sp1
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23
type: software_Package
supplied by: SPDXRef-gnrtd137
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31868
type: software_Package
supplied by: SPDXRef-gnrtd31872
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp1
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd494
type: software_Package
supplied by: SPDXRef-gnrtd511
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-10.oe2403sp1
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd115
type: software_Package
supplied by: SPDXRef-gnrtd126
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19451
type: software_Package
supplied by: SPDXRef-gnrtd19461
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp1
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd410
type: software_Package
supplied by: SPDXRef-gnrtd417
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/bbb184c59d147ac8008bfc4e65cc222611fcbe5e39579873511151bfe6007f20-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1