type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd1073
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1074
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd348
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd349
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10779
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10780
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19363
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19364
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1140
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1141
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1204
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1205
from: shadow
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd956
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd957
from: zstd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19350
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19351
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10782
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10783
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5294
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5295
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1054
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7217
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd7218
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5291
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5292
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15993
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd15994
from: xdg-dbus-proxy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7214
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd7215
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15990
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd15991
from: xdg-dbus-proxy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2902
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2903
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2778
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libXau
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5631
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5632
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5629
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16004
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16005
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5970
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5971
from: librsvg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19317
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19318
from: dconf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1251
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1252
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1345
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1346
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10674
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10675
from: python3-gobject-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6045
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6046
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd959
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd960
from: zstd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19366
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19367
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16007
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16008
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2776
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libXau
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1137
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1138
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd345
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd346
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6042
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6043
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19314
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19315
from: dconf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2899
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2900
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1348
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1349
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19353
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19354
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19183
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10671
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10672
from: python3-gobject-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19181
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5967
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5968
from: librsvg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1201
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1202
from: shadow
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1070
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1071
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1254
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1255
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19307
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dconf
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19323
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: shadow
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19319
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python3-gobject-base
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19356
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19305
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19359
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19330
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libappstream-glib
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19321
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19358
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libXau
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19303
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xdg-dbus-proxy
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19329
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19306
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fuse
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19355
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: librsvg2
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19304
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bubblewrap
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19302
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19322
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19361
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19362
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19320
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19325
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libseccomp
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19326
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ostree
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19324
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsoup
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19328
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zstd
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19327
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19357
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19360
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: flatpak
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1202
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16005
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6046
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1349
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1205
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd960
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd349
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5629
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5971
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1252
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4373
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5968
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19318
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1138
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19351
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7215
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7218
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10675
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10780
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19354
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15991
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16008
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd346
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5295
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15994
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10672
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6043
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1141
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10783
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19364
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2900
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd957
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5632
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1255
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1071
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19367
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1346
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2903
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19315
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5292
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1074
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1347
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15992
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd347
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5293
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19352
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10781
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7216
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2901
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1203
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1072
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16006
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10673
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd958
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1253
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5630
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19316
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5969
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1053
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6044
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19365
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1139
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19182
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2777
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1244
type: software_Package
supplied by: SPDXRef-gnrtd1347
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5608
type: software_Package
supplied by: SPDXRef-gnrtd5630
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-7.oe2403sp4
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19059
type: software_Package
supplied by: SPDXRef-gnrtd19182
software download location: NOASSERTION
summary: Tool for managing bootable, immutable filesystem trees
software package version: 0:2024.4-1.oe2403sp4
software home page: https://ostree.readthedocs.io/en/latest/
description: This project is now known as "libostree", though it is still appropriate to use the previous name: "OSTree" (or "ostree"). The focus is on projects which use libostree's shared library, rather than users directly invoking the command line tools (except for build systems). However, in most of the rest of the documentation, we will use the term "OSTree", since it's slightly shorter, and changing all documentation at once is impractical.
name: ostree
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1175
type: software_Package
supplied by: SPDXRef-gnrtd1203
software download location: NOASSERTION
summary: Tools for managing accounts and shadow password files
software package version: 2:4.14.3-8.oe2403sp4
software home page: http://pkg-shadow.alioth.debian.org/
description: This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts.
name: shadow
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd952
type: software_Package
supplied by: SPDXRef-gnrtd958
software download location: NOASSERTION
summary: A fast lossless compression algorithm
software package version: 0:1.5.5-4.oe2403sp4
software home page: https://github.com/facebook/zstd
description: Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage, provided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels and has a better compression ratio.
name: zstd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19308
type: software_Package
supplied by: SPDXRef-gnrtd19316
software download location: NOASSERTION
summary: Dconf provides a backend to the GSettings API in Glib
software package version: 0:0.40.0-3.oe2403sp4
software home page: http://live.gnome.org/dconf
description: Dconf is a low-level configuration system. Its main purpose is to provide a backend to GSettings on platforms that don't already have configuration storage systems.
name: dconf
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1048
type: software_Package
supplied by: SPDXRef-gnrtd1053
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.9-13.oe2403sp4
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15986
type: software_Package
supplied by: SPDXRef-gnrtd15992
software download location: NOASSERTION
summary: Filtering proxy for D-Bus connections
software package version: 0:0.1.2-2.oe2403sp4
software home page: https://github.com/flatpak/xdg-dbus-proxy/
description: xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts.
name: xdg-dbus-proxy
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1046
type: software_Package
supplied by: SPDXRef-gnrtd1072
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2774
type: software_Package
supplied by: SPDXRef-gnrtd2777
software download location: NOASSERTION
summary: Sample Authorization Protocol for X
software package version: 0:1.0.11-1.oe2403sp4
software home page: https://www.x.org
description: This is a very simple mechanism for providing individual access to an X Window System display.It uses existing core protocol and library hooks for specifying authorization data in the connection setup block to restrict use of the display to only those clients that show that they know a server-specific key called a "magic cookie".
name: libXau
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5286
type: software_Package
supplied by: SPDXRef-gnrtd5293
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-4.oe2403sp4
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19331
type: software_Package
supplied by: SPDXRef-gnrtd19352
software download location: NOASSERTION
summary: AppStream Abstraction Library
software package version: 0:0.8.2-1.oe2403sp4
software home page: http://people.freedesktop.org/~hughsient/appstream-glib/
description: The library provides GObjects and helper methods for easier reading and Write AppStream metadata. At the same time, it provides a simple DOM implementation to achieve more efficient conversion between edit nodes and standard XML.
name: libappstream-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1247
type: software_Package
supplied by: SPDXRef-gnrtd1253
software download location: NOASSERTION
summary: Interface to the syscall filtering mechanism
software package version: 0:2.5.4-5.oe2403sp4
software home page: https://github.com/seccomp/libseccomp
description: The libseccomp library provides an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to abstract away the underlying BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.
name: libseccomp
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16000
type: software_Package
supplied by: SPDXRef-gnrtd16006
software download location: NOASSERTION
summary: Core execution tool for unprivileged containers
software package version: 0:0.8.0-2.oe2403sp4
software home page: https://github.com/projectatomic/bubblewrap
description: There is an effort in the Linux kernel called user namespaces which attempts to allow unprivileged users to use container features.
name: bubblewrap
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2895
type: software_Package
supplied by: SPDXRef-gnrtd2901
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10749
type: software_Package
supplied by: SPDXRef-gnrtd10781
software download location: NOASSERTION
summary: An HTTP library implementation
software package version: 0:2.74.3-21.oe2403sp4
software home page: https://wiki.gnome.org/Projects/libsoup
description: libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.
name: libsoup
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10659
type: software_Package
supplied by: SPDXRef-gnrtd10673
software download location: NOASSERTION
summary: base package for python3-gobject package
software package version: 0:3.46.0-3.oe2403sp4
software home page: https://wiki.gnome.org/Projects/PyGObject
description: This package provides the non-cairo specific bits of the GObject Introspection library.
name: python3-gobject-base
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7209
type: software_Package
supplied by: SPDXRef-gnrtd7216
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd329
type: software_Package
supplied by: SPDXRef-gnrtd347
software download location: NOASSERTION
summary: User space File System of fuse2
software package version: 0:2.9.9-12.oe2403sp4
software home page: https://fuse.sf.net
description: FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel. The FUSE project consists of two components: the fuse kernel module (maintained in the regular kernel repositories) and the libfuse userspace library (maintained in this repository). libfuse provides the reference implementation for communicating with the FUSE kernel module.
name: fuse
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1112
type: software_Package
supplied by: SPDXRef-gnrtd1139
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6038
type: software_Package
supplied by: SPDXRef-gnrtd6044
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5895
type: software_Package
supplied by: SPDXRef-gnrtd5969
software download location: NOASSERTION
summary: An SVG library based on cairo
software package version: 0:2.57.1-6.oe2403sp4
software home page: https://wiki.gnome.org/Projects/LibRsvg
description: An SVG library based on cairo.
name: librsvg2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19301
type: software_Package
supplied by: SPDXRef-gnrtd19365
software download location: NOASSERTION
summary: Application deployment framework for desktop apps
software package version: 0:1.10.2-12.oe2403sp4
software home page: http://flatpak.org/
description: flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information.
name: flatpak
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1