type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-04T17:52:28Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-04T17:52:28Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd96
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd97
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd75
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd93
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd94
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd75
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd99
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd100
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd102
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd100
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd27
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd28
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd9
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd68
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd69
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd7
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd65
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd66
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd7
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd30
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd31
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd9
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd74
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd75
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd73
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd7
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd98
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd9
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd94
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd69
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd100
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd97
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd31
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd28
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd66
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd67
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd29
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd101
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd95
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd9
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd29
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp3
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd75
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd95
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-5.oe2403sp3
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-5.oe2403sp3?arch=x86_64&epoch=0&upstream=freetype-2.13.2-5.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd7
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd67
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-13.oe2403sp3
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-13.oe2403sp3?arch=x86_64&epoch=0&upstream=glib2-2.78.3-13.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd72
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd101
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-4.oe2403sp3
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-4.oe2403sp3?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-4.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0