type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd5595
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5596
from: libwebp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8735
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libdrm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6061
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6062
from: libusbx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2919
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5962
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5963
from: pango
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2785
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2838
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10988
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10989
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2890
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2891
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2887
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2888
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1054
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10978
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10979
from: gstreamer1-plugins-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd714
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd715
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10981
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10982
from: gstreamer1-plugins-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd717
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd715
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5592
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5593
from: libwebp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: gsm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10726
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10727
from: gstreamer1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2902
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2903
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2783
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9285
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9286
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9283
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5965
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5966
from: pango
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5631
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5632
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10817
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10818
from: libnice
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5629
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10814
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10815
from: libnice
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6207
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: wayland
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5970
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5971
from: librsvg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2921
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10991
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10992
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10825
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: gsm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd260
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2656
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2657
from: nettle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6205
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: wayland
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2899
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2900
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6058
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6059
from: libusbx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2840
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10875
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10876
from: opus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10880
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10881
from: libsndfile
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5967
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5968
from: librsvg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10878
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10879
from: opus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2659
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2660
from: nettle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8737
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libdrm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10729
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10730
from: gstreamer1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10883
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10884
from: libsndfile
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10897
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10898
from: orc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10894
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10895
from: orc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10905
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gsm
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10819
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: librsvg2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10986
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10887
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10735
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libnice
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10733
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libdrm
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10820
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsndfile
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10885
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libusbx
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10891
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: orc
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10985
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10983
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10907
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gstreamer1-plugins-base
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10906
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gstreamer1
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10903
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10900
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: pango
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10902
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: wayland
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10734
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgudev
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10889
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10890
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10886
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libwebp
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10899
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10984
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: nettle
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10888
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lcms2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10901
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10987
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: opus
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10904
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: gstreamer1-plugins-bad-free
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5596
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2657
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv3+ or GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10982
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd715
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6062
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10876
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5629
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5971
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10818
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 and MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5968
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10881
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6059
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10895
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2660
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv3+ or GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5963
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5966
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10815
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 and MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10884
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9286
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2891
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2900
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10879
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5632
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2888
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10730
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9283
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10989
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10979
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5593
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10727
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10898
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2903
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10992
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2784
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2839
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10728
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2901
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6060
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10816
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2658
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9284
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10877
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5630
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8736
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5969
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1053
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd716
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2920
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10980
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2889
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5964
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10896
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6206
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5594
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10882
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10990
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9277
type: software_Package
supplied by: SPDXRef-gnrtd9284
software download location: NOASSERTION
summary: Library that provides GObject bindings for libudev
software package version: 0:238-3.oe2403sp4
software home page: https://wiki.gnome.org/Projects/libgudev
description: Library provides GObject bindings for libudev. It used to be part of udev, then merged into systemd. It's now a project on its own.
name: libgudev
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2868
type: software_Package
supplied by: SPDXRef-gnrtd2920
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-4.oe2403sp4
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10821
type: software_Package
supplied by: SPDXRef-gnrtd10882
software download location: NOASSERTION
summary: Library for reading and writing sound files
software package version: 0:1.2.2-5.oe2403sp4
software home page: http://libsndfile.github.io/libsndfile
description: Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
name: libsndfile
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5608
type: software_Package
supplied by: SPDXRef-gnrtd5630
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-7.oe2403sp4
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2653
type: software_Package
supplied by: SPDXRef-gnrtd2658
software download location: NOASSERTION
summary: A low-level cryptographic library
software package version: 0:3.8.1-1.oe2403sp4
software home page: https://www.lysator.liu.se/~nisse/nettle/
description: Nettle is a cryptographic library designed to fit any context: in crypto toolkits for object-oriented languages, in applications like LSH or GnuPG, or even in kernel space.
name: nettle
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2836
type: software_Package
supplied by: SPDXRef-gnrtd2839
software download location: NOASSERTION
summary: Color Management Engine
software package version: 0:2.16-3.oe2403sp4
software home page: https://www.littlecms.com
description: LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.
name: lcms2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd710
type: software_Package
supplied by: SPDXRef-gnrtd716
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp4
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2769
type: software_Package
supplied by: SPDXRef-gnrtd2784
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403sp4
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10732
type: software_Package
supplied by: SPDXRef-gnrtd10990
software download location: NOASSERTION
summary: Not well tested plugins for GStreamer framework
software package version: 0:1.16.2-15.oe2403sp4
software home page: http://gstreamer.freedesktop.org/
description: GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good enough quality.
name: gstreamer1-plugins-bad-free
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10892
type: software_Package
supplied by: SPDXRef-gnrtd10896
software download location: NOASSERTION
summary: The Oil Run-time Compiler
software package version: 0:0.4.42-1.oe2403sp4
software home page: https://gstreamer.freedesktop.org/
description: Orc is the sucessor to Liboil - The Library of Optimized Inner Loops. Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.
name: orc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1048
type: software_Package
supplied by: SPDXRef-gnrtd1053
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.9-13.oe2403sp4
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6054
type: software_Package
supplied by: SPDXRef-gnrtd6060
software download location: NOASSERTION
summary: Library for accessing USB devices
software package version: 0:1.0.26-3.oe2403sp4
software home page: http://libusb.info
description: libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C (Haiku backend in C++) and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version (see COPYING). libusb is abstracted internally in such a way that it can hopefully be ported to other operating systems. Please see the PORTING file for more information.
name: libusbx
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10873
type: software_Package
supplied by: SPDXRef-gnrtd10877
software download location: NOASSERTION
summary: An audio codec for use in low-delay speech and audio communication
software package version: 0:1.4-1.oe2403sp4
software home page: https://www.opus-codec.org/
description: Opus is unmatched for interactive speech and music transmission over the Internet, but is also intended for storage and streaming applications. It is standardized by the Internet Engineering Task Force (IETF) as RFC 6716 which incorporated technology from Skype’s SILK codec and Xiph.Org’s CELT codec.
name: opus
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10908
type: software_Package
supplied by: SPDXRef-gnrtd10980
software download location: NOASSERTION
summary: GStreamer streaming media framework base plugins
software package version: 0:1.22.5-4.oe2403sp4
software home page: http://gstreamer.freedesktop.org/
description: GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.
name: gstreamer1-plugins-base
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2895
type: software_Package
supplied by: SPDXRef-gnrtd2901
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2871
type: software_Package
supplied by: SPDXRef-gnrtd2889
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp4
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6202
type: software_Package
supplied by: SPDXRef-gnrtd6206
software download location: NOASSERTION
summary: Wayland Compositor Infrastructure
software package version: 0:1.22.0-1.oe2403sp4
software home page: https://wayland.freedesktop.org/
description: Wayland is a protocol for a compositor to talk to its clients as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers. Part of the Wayland project is also the Weston reference implementation of a Wayland compositor. Weston can run as an X client or under Linux KMS and ships with a few demo clients. The Weston compositor is a minimal and fast compositor and is suitable for many embedded and mobile use cases.
name: wayland
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8733
type: software_Package
supplied by: SPDXRef-gnrtd8736
software download location: NOASSERTION
summary: library for direct rendering manager
software package version: 0:2.4.119-2.oe2403sp4
software home page: https://dri.freedesktop.org
description: libdrm provides a user space library for accessing the DRM, direct rendering manager, on operating systems that support the ioctl interface. libdrm is a low-level library, typically used by graphics drivers such as the Mesa DRI drivers, the X drivers, libva and similar projects.
name: libdrm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10823
type: software_Package
supplied by: SPDXRef-gnrtd10826
software download location: NOASSERTION
summary: GSM speech compressor Shared libraries and Utilities
software package version: 0:1.0.22-1.oe2403sp4
software home page: http://www.quut.com/gsm/
description: Contains the library for a GSM speech compressor, libgsm implements the European GSM 06.10 provisional standard for full-rate speech transcoding, prI-ETS 300 036, which uses RPE/LTP (residual pulse excitation/long term prediction) coding at 13 kbit/s. GSM 06.10 compresses frames of 162 13-bit samples (8 kHz sampling rate) into 260 bits.
name: gsm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: software_Package
supplied by: SPDXRef-gnrtd262
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5590
type: software_Package
supplied by: SPDXRef-gnrtd5594
software download location: NOASSERTION
summary: Library and tools for the WebP graphics format
software package version: 0:1.3.2-3.oe2403sp4
software home page: https://www.webmproject.org
description: This is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently.
name: libwebp
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5918
type: software_Package
supplied by: SPDXRef-gnrtd5964
software download location: NOASSERTION
summary: System for layout and rendering of internationalized text
software package version: 0:1.51.0-1.oe2403sp4
software home page: https://pango.gnome.org/
description: Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is needed, though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handling for GTK+. Pango is designed to be modular; the core Pango layout engine can be used with different font backends. The integration of Pango with Cairo provides a complete solution with high quality text handling and graphics rendering.
name: pango
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5895
type: software_Package
supplied by: SPDXRef-gnrtd5969
software download location: NOASSERTION
summary: An SVG library based on cairo
software package version: 0:2.57.1-6.oe2403sp4
software home page: https://wiki.gnome.org/Projects/LibRsvg
description: An SVG library based on cairo.
name: librsvg2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10736
type: software_Package
supplied by: SPDXRef-gnrtd10816
software download location: NOASSERTION
summary: An implementation of ICE standard
software package version: 0:0.1.21-1.oe2403sp4
software home page: https://nice.freedesktop.org/wiki/
description: Libnice is an implementation of the IETF's Interactive Connectivity Establishment (ICE) standard (RFC 5245). It provides a GLib-based library, libnice, as well as GStreamer elements. ICE is useful for applications that want to establish peer-to-peer UDP data streams. It automates the process of traversing NATs and provides security against some attacks. It also allows applications to create reliable streams using a TCP over UDP layer.
name: libnice
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10717
type: software_Package
supplied by: SPDXRef-gnrtd10728
software download location: NOASSERTION
summary: Bindings for GStreamer 1.0, the open source multimedia framework
software package version: 0:1.22.5-4.oe2403sp4
software home page: https://gstreamer.freedesktop.org/
description: GStreamer1 implements a framework that allows for processing and encoding of multimedia sources in a manner similar to a shell pipeline. Because it's introspection-based, most of the classes follow directly from the C API. Therefore, most of the documentation is by example rather than a full breakdown of the class structure.
name: gstreamer1
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1