type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-22T18:46:28Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-22T18:46:28Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-71d03759-7c43-4b9b-b81c-c376ce2c59f0-specv3/SPDXRef-gnrtd1159
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1160
from: libidn
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1214
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1215
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd666
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd667
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd140
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd972
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd82
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd974
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd82
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1217
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1218
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd99
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd100
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1024
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1025
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1156
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1157
from: libidn
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd663
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd664
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd993
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd991
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1238
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1239
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1225
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1226
from: jbig2dec
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1235
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1236
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1138
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1139
from: openjpeg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1204
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1205
from: libpaper
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1201
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1202
from: libpaper
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd157
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1241
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1242
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd966
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd82
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1141
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1142
from: openjpeg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd34
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd983
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd981
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd142
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd143
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd82
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd968
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd82
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd159
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd160
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1044
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1045
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1196
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: cups-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd97
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd102
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd94
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd990
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd991
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd980
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd981
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1222
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1223
from: jbig2dec
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1194
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: cups-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1028
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1042
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1032
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd82
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1244
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1245
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1228
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1207
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1206
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1143
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1208
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1240
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1219
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jbig2dec
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1144
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1227
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lcms2
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1132
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1229
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1133
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libtiff
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1161
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cups-libs
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1134
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1146
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libidn
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1135
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openjpeg2
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1131
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1197
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpaper
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1230
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1145
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1045
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1157
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv3+ and GFDL-1.3-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1025
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd664
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1239
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd97
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd140
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd143
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd157
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1205
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1142
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1042
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND (FTL OR GPL-2.0-or-later) AND MIT AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1215
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1202
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1223
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1236
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1160
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv3+ and GFDL-1.3-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: simplelicensing_LicenseExpression
simplelicensing license expression: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd100
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1218
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd103
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1226
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1242
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd667
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1245
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd981
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1139
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1203
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd967
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1195
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd982
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1043
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd973
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1026
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd158
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1243
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1237
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd665
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1216
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1140
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1158
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd992
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1033
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd101
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1224
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1147
type: software_Package
supplied by: SPDXRef-gnrtd1158
software download location: NOASSERTION
summary: GNU IDN Library - Libidn
software package version: 0:1.41-2.oe2403sp1
software home page: http://www.gnu.org/software/libidn/
description: GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn's purpose is to encode and decode internationalized domain names.
name: libidn
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libidn@1.41-2.oe2403sp1?arch=x86_64&epoch=0&upstream=libidn-1.41-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1130
type: software_Package
supplied by: SPDXRef-gnrtd1243
software download location: NOASSERTION
summary: An interpreter for PostScript and PDF files
software package version: 0:9.56.1-15.oe2403sp1
software home page: https://ghostscript.com/
description: Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
name: ghostscript
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/ghostscript@9.56.1-15.oe2403sp1?arch=x86_64&epoch=0&upstream=ghostscript-9.56.1-15.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1209
type: software_Package
supplied by: SPDXRef-gnrtd1216
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-5.oe2403sp1
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-5.oe2403sp1?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1220
type: software_Package
supplied by: SPDXRef-gnrtd1224
software download location: NOASSERTION
summary: A decoder implementation of the JBIG2 image compression format.
software package version: 0:0.20-3.oe2403sp1
software home page: https://jbig2dec.com/
description: jbig2dec is a decoder implementation of the JBIG2 image compression format.
name: jbig2dec
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/jbig2dec@0.20-3.oe2403sp1?arch=x86_64&epoch=0&upstream=jbig2dec-0.20-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1018
type: software_Package
supplied by: SPDXRef-gnrtd1026
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd970
type: software_Package
supplied by: SPDXRef-gnrtd973
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403sp1
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libX11@1.8.7-3.oe2403sp1?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd658
type: software_Package
supplied by: SPDXRef-gnrtd665
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: software_Package
supplied by: SPDXRef-gnrtd95
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd35
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1000
type: software_Package
supplied by: SPDXRef-gnrtd1043
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403sp1
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-3.oe2403sp1?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd977
type: software_Package
supplied by: SPDXRef-gnrtd982
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403sp1
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd90
type: software_Package
supplied by: SPDXRef-gnrtd101
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1002
type: software_Package
supplied by: SPDXRef-gnrtd1033
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403sp1
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13
type: software_Package
supplied by: SPDXRef-gnrtd158
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd985
type: software_Package
supplied by: SPDXRef-gnrtd992
software download location: NOASSERTION
summary: TIFF Library and Utilities
software package version: 0:4.6.0-10.oe2403sp1
software home page: https://libtiff.gitlab.io/libtiff/
description: This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
name: libtiff
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libtiff@4.6.0-10.oe2403sp1?arch=x86_64&epoch=0&upstream=libtiff-4.6.0-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1198
type: software_Package
supplied by: SPDXRef-gnrtd1203
software download location: NOASSERTION
summary: Library for handling paper characteristics
software package version: 0:1.1.29-2.oe2403sp1
software home page: http://packages.qa.debian.org/libp/libpaper.html
description: The libpaper paper-handling library automates recognition of many different paper types and sizes for programs that need to deal with printed output.
name: libpaper
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/libpaper@1.1.29-2.oe2403sp1?arch=x86_64&epoch=0&upstream=libpaper-1.1.29-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd964
type: software_Package
supplied by: SPDXRef-gnrtd967
software download location: NOASSERTION
summary: Color Management Engine
software package version: 0:2.16-2.oe2403sp1
software home page: https://www.littlecms.com
description: LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.
name: lcms2
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/lcms2@2.16-2.oe2403sp1?arch=x86_64&epoch=0&upstream=lcms2-2.16-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1162
type: software_Package
supplied by: SPDXRef-gnrtd1195
software download location: NOASSERTION
summary: CUPS libs
software package version: 1:2.4.7-10.oe2403sp1
software home page: https://openprinting.github.io/cups/
description: CUPS printing system provides a portable printing layer for UNIX® operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. The cups-libs package provides libraries used by applications to use CUPS natively, without needing the lp/lpr commands.
name: cups-libs
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/cups-libs@2.4.7-10.oe2403sp1?arch=x86_64&epoch=1&upstream=cups-2.4.7-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1136
type: software_Package
supplied by: SPDXRef-gnrtd1140
software download location: NOASSERTION
summary: C-Library for JPEG 2000
software package version: 0:2.5.0-6.oe2403sp1
software home page: https://github.com/uclouvain/openjpeg
description: OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.
name: openjpeg2
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/openjpeg2@2.5.0-6.oe2403sp1?arch=x86_64&epoch=0&upstream=openjpeg2-2.5.0-6.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1231
type: software_Package
supplied by: SPDXRef-gnrtd1237
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/cairo-gobject@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd27
type: software_Package
supplied by: SPDXRef-gnrtd141
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/e30d7685744a7c83e00e34883b4caa13098c6dd4580c70b9313f50e8b8c0aee4-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1