type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-22T18:57:13Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-22T18:57:13Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/aarch64-d9632db4-a9df-4c98-909a-5ccc6393b438-specv3/SPDXRef-gnrtd140
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd141
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd157
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd323
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd324
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd153
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd154
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd320
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd321
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd131
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd132
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd444
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32936
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19594
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19595
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd378
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd379
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd138
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd101
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd102
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37894
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9012
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5512
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5513
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5515
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5516
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd71
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd499
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd49
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd50
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd219
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd220
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd93
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd134
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd135
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37906
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9012
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd770
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd82
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd772
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd82
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd104
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd105
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37892
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9012
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19597
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19598
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd52
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32934
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd222
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd223
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37904
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9012
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd96
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd375
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd376
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd441
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37885
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37897
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37901
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37899
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37900
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37903
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37895
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37881
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37896
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37887
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37898
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37882
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37886
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37902
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37884
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37880
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37883
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd376
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd324
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd444
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd157
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd321
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19598
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd132
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9012
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd50
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd102
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd220
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd223
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5516
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd154
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd105
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19595
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd379
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5513
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd133
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19596
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32935
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5514
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd221
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd322
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd103
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd771
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd155
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd377
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37905
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37893
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd44
type: software_Package
supplied by: SPDXRef-gnrtd73
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.0.12-22.oe2403sp1
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37888
type: software_Package
supplied by: SPDXRef-gnrtd37893
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd91
type: software_Package
supplied by: SPDXRef-gnrtd94
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd450
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-32.oe2403sp1
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32931
type: software_Package
supplied by: SPDXRef-gnrtd32935
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp1
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd313
type: software_Package
supplied by: SPDXRef-gnrtd322
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-43.oe2403sp1
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37879
type: software_Package
supplied by: SPDXRef-gnrtd37905
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-7.oe2403sp1
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47
type: software_Package
supplied by: SPDXRef-gnrtd51
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19586
type: software_Package
supplied by: SPDXRef-gnrtd19596
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp1
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd370
type: software_Package
supplied by: SPDXRef-gnrtd377
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd768
type: software_Package
supplied by: SPDXRef-gnrtd771
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp1
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd206
type: software_Package
supplied by: SPDXRef-gnrtd221
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403sp1
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd425
type: software_Package
supplied by: SPDXRef-gnrtd442
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-10.oe2403sp1
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111
type: software_Package
supplied by: SPDXRef-gnrtd133
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-4.oe2403sp1
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25
type: software_Package
supplied by: SPDXRef-gnrtd139
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd98
type: software_Package
supplied by: SPDXRef-gnrtd103
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5508
type: software_Package
supplied by: SPDXRef-gnrtd5514
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-2.oe2403sp1
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10
type: software_Package
supplied by: SPDXRef-gnrtd155
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/60ea82253c2bf8471f2066e9299f2564f8940a0905f4bd052f796da897408437-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1