type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-11T17:57:00Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-11T17:57:00Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd122
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd123
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd94
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd39
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd40
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd129
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd55
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd127
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd55
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd66
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd67
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd61
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd36
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd37
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd88
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd89
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd70
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd125
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd126
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd94
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd63
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd64
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd61
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd91
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd92
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd70
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd69
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd70
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd68
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd93
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd94
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd60
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd61
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd67
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd55
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd89
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND (FTL OR GPL-2.0-or-later) AND MIT AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd37
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd92
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd123
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd40
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd126
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd65
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd128
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd38
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd124
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd90
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd61
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd65
software download location: NOASSERTION
summary: Graphite provides cross-platform rendering for complex writing systems
software package version: 0:1.3.14-9.oe2403sp3
software home page: https://sourceforge.net/projects/silgraphite/
description: Graphite is a system that can be used to create “smart fonts” capable of displaying writing systems with various complex behaviors. A smart font contains not only letter shapes but also additional instructions indicating how to combine and position the letters in complex ways.
name: graphite2
software source info: acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd38
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp3
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd59
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd128
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-4.oe2403sp3
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd94
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd124
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-13.oe2403sp3
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd70
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd90
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-5.oe2403sp3
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0