type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-18T17:52:31Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-18T17:52:31Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7988
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7989
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7983
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9652
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9653
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9650
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7985
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7986
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7983
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9655
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9656
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9650
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9651
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7983
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9650
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7986
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-3.0+ AND MIT AND (LGPL-3.0+ OR GPL-2.0+))
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9656
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND GPL-3.0+ AND (LGPL-3.0+ OR GPL-2.0+))
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7989
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((LGPL-3.0+ OR GPL-2.0+) AND MIT AND GPL-3.0+)
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9653
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((LGPL-3.0+ OR GPL-2.0+) AND GPL-3.0+ AND MIT)
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9654
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7987
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7983
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd7987
software download location: NOASSERTION
summary: A library for X.509 and CMS
software package version: 0:1.6.4-5.oe2403sp3
software home page: https://www.gnupg.org/software/libksba/index.html
description: Libksba is a library to make the tasks of working with X.509 certificates, CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way.
name: libksba
software source info: acquired package info from repodata DB: repodata/dd4dea9dc5aac1d61f7a638c7e75ab7e18453506d28d9029f8c9e6809d4dd32c-primary.sqlite.bz2
software package url: pkg:rpm/libksba@1.6.4-5.oe2403sp3?arch=x86_64&epoch=0&upstream=libksba-1.6.4-5.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9650
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd9654
software download location: NOASSERTION
summary: Development headers and libraries for libksba
software package version: 0:1.6.4-5.oe2403sp3
software home page: https://www.gnupg.org/software/libksba/index.html
description: Development headers and libraries for libksba
name: libksba-devel
software source info: acquired package info from repodata DB: repodata/dd4dea9dc5aac1d61f7a638c7e75ab7e18453506d28d9029f8c9e6809d4dd32c-primary.sqlite.bz2
software package url: pkg:rpm/libksba-devel@1.6.4-5.oe2403sp3?arch=x86_64&epoch=0&upstream=libksba-1.6.4-5.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1