type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd5620
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1017
from: shared-mime-info
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11285
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd11286
from: libxmlb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1073
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1074
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39054
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd18990
from: efivar-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2670
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2671
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1140
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1141
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd11283
from: libxmlb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2667
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2668
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45867
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd45868
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45824
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libcbor
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5294
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5295
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5291
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5292
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd627
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd628
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45844
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1483
from: gcab
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6067
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6068
from: libgusb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2902
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2903
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9285
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9286
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9283
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45855
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd45856
from: libjcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd733
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd341
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6064
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6065
from: libgusb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5618
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1017
from: shared-mime-info
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45842
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1483
from: gcab
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45858
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd45859
from: libjcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45822
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libcbor
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1345
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1346
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10674
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10675
from: python3-gobject-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6045
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6046
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd916
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1137
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1138
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6042
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6043
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2899
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2900
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45870
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd45871
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1348
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1349
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd731
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd341
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10671
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10672
from: python3-gobject-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd630
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd631
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1070
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1071
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd913
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39056
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd18990
from: efivar-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45835
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45845
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libjcat
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45819
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcbor
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45863
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45862
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45830
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gnutls
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45860
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: efivar-libs
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45833
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45865
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45861
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45818
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45864
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxmlb
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45832
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45826
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgusb
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45866
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45834
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45825
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45831
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python3-gobject-base
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45827
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgudev
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45829
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: shared-mime-info
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45828
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45817
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45836
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gcab
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1483
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.1-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2671
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6046
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45856
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1349
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd914
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd631
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1138
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45871
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2668
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18990
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.1-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd628
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10675
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd341
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1017
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5295
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45868
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10672
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6043
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11286
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1141
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6068
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9286
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2900
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6065
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45859
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1071
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9283
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2903
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1346
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11283
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5292
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1074
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5619
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1347
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5293
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2901
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6066
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd732
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1072
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45857
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10673
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39055
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11284
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9284
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd915
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45823
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45869
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45843
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6044
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1139
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd629
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2669
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9277
type: software_Package
supplied by: SPDXRef-gnrtd9284
software download location: NOASSERTION
summary: Library that provides GObject bindings for libudev
software package version: 0:238-3.oe2403sp4
software home page: https://wiki.gnome.org/Projects/libgudev
description: Library provides GObject bindings for libudev. It used to be part of udev, then merged into systemd. It's now a project on its own.
name: libgudev
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1244
type: software_Package
supplied by: SPDXRef-gnrtd1347
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45837
type: software_Package
supplied by: SPDXRef-gnrtd45843
software download location: NOASSERTION
summary: A GObject library to create cabinet files
software package version: 0:1.5-2.oe2403sp4
software home page: https://gitlab.gnome.org/GNOME/gcab
description: Gcab is a gobject library to create cabinet files.
name: gcab
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11275
type: software_Package
supplied by: SPDXRef-gnrtd11284
software download location: NOASSERTION
summary: A library to help create and query binary XML blobs
software package version: 0:0.3.14-1.oe2403sp4
software home page: https://github.com/hughsie/libxmlb
description: XML is slow to parse and strings inside the document cannot be memory mapped as they do not have a trailing NUL char. The libxmlb library takes XML source, and converts it to a structured binary representation with a deduplicated string table -- where the strings have the NULs included. This allows an application to mmap the binary XML file, do an XPath query and return some strings without actually parsing the entire document. This is all done using (almost) zero allocations and no actual copying of the binary data.
name: libxmlb
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6049
type: software_Package
supplied by: SPDXRef-gnrtd6066
software download location: NOASSERTION
summary: GObject-based library for libusb1
software package version: 0:0.4.8-3.oe2403sp4
software home page: https://github.com/hughsie/libgusb
description: GUsb is a GObject wrapper for libusb1 that makes it easy to do asynchronous control, bulk and interrupt transfers with proper cancellation and integration into a mainloop.This makes it easy to integrate low level USB transfers with your high-level application or system daemon.
name: libgusb
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd613
type: software_Package
supplied by: SPDXRef-gnrtd629
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-6.oe2403sp4
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45816
type: software_Package
supplied by: SPDXRef-gnrtd45869
software download location: NOASSERTION
summary: Make updating firmware on Linux automatic, safe and reliable
software package version: 0:1.8.17-9.oe2403sp4
software home page: https://github.com/fwupd/fwupd
description: fwupd aims to make updating firmware on Linux automatic, safe and reliable.
name: fwupd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39052
type: software_Package
supplied by: SPDXRef-gnrtd39055
software download location: NOASSERTION
summary: Libraries for efivar
software package version: 0:38-8.oe2403sp4
software home page: https://github.com/rhboot/efivar
description: Libraries for efivar.
name: efivar-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45820
type: software_Package
supplied by: SPDXRef-gnrtd45823
software download location: NOASSERTION
summary: A CBOR parsing library
software package version: 0:0.10.2-1.oe2403sp4
software home page: http://libcbor.org
description: libcbor is a C library for parsing and generating CBOR.
name: libcbor
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5610
type: software_Package
supplied by: SPDXRef-gnrtd5619
software download location: NOASSERTION
summary: Shared MIME information database
software package version: 0:2.4-2.oe2403sp4
software home page: https://freedesktop.org/wiki/Software/shared-mime-info/
description: The shared-mime-info package contains the core database of common types and the update-mime-database command used to extend it. It requires glib2 to be installed for building the update command. Additionally, it uses intltool for translations, though this is only a dependency for the maintainers.
name: shared-mime-info
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd850
type: software_Package
supplied by: SPDXRef-gnrtd915
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd729
type: software_Package
supplied by: SPDXRef-gnrtd732
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-8.oe2403sp4
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2646
type: software_Package
supplied by: SPDXRef-gnrtd2669
software download location: NOASSERTION
summary: The GNU Secure Communication Protocol Library
software package version: 0:3.8.2-16.oe2403sp4
software home page: https://www.gnutls.org/
description: GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.
name: gnutls
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1046
type: software_Package
supplied by: SPDXRef-gnrtd1072
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5286
type: software_Package
supplied by: SPDXRef-gnrtd5293
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-4.oe2403sp4
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2895
type: software_Package
supplied by: SPDXRef-gnrtd2901
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10659
type: software_Package
supplied by: SPDXRef-gnrtd10673
software download location: NOASSERTION
summary: base package for python3-gobject package
software package version: 0:3.46.0-3.oe2403sp4
software home page: https://wiki.gnome.org/Projects/PyGObject
description: This package provides the non-cairo specific bits of the GObject Introspection library.
name: python3-gobject-base
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45846
type: software_Package
supplied by: SPDXRef-gnrtd45857
software download location: NOASSERTION
summary: Library for reading Jcat files
software package version: 0:0.1.13-2.oe2403sp4
software home page: https://github.com/hughsie/libjcat
description: This library allows reading and writing gzip-compressed JSON catalog files, which can be used to store GPG, PKCS-7 and SHA-256 checksums for each file. This provides equivalent functionality to the catalog files supported in Microsoft Windows.
name: libjcat
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1112
type: software_Package
supplied by: SPDXRef-gnrtd1139
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6038
type: software_Package
supplied by: SPDXRef-gnrtd6044
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1