type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-08-01T17:55:59Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-08-01T17:55:59Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd41
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd42
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd16
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd762
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd763
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd44
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd45
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd16
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd594
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd595
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd591
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd597
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd595
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd591
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd692
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd693
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd688
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd695
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd696
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd688
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd759
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd760
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd758
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd688
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd757
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd591
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd756
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd16
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd693
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd763
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd42
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd696
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd45
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd595
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd760
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd596
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd43
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd755
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd761
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-7.oe2403sp3
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/d96f7206249b192484cd473c7213938a2173442406260d9a32d8f941053a6c53-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-7.oe2403sp3?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-7.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd16
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd43
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp3
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/d96f7206249b192484cd473c7213938a2173442406260d9a32d8f941053a6c53-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd591
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd596
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403sp3
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/d96f7206249b192484cd473c7213938a2173442406260d9a32d8f941053a6c53-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403sp3?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd688
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/SPDXRef-gnrtd694
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-13.oe2403sp3
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/d96f7206249b192484cd473c7213938a2173442406260d9a32d8f941053a6c53-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-13.oe2403sp3?arch=x86_64&epoch=0&upstream=glib2-2.78.3-13.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-23bb96e2-e7b5-40b9-83ce-d0ef076bae69-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0