type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1019
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1017
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1073
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1074
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19353
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19354
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10779
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10780
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2601
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2602
from: fontconfig
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd316
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd317
from: libuuid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10681
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10682
from: libstemmer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2902
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2903
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5962
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5963
from: pango
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2443
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6210
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6045
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6046
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6212
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd916
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5965
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5966
from: pango
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5631
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5632
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10684
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10685
from: libstemmer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19350
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19351
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd313
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd314
from: libuuid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10782
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10783
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1016
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1017
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2890
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2891
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2887
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2888
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5629
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1070
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1071
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6042
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6043
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2604
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2605
from: fontconfig
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd913
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2899
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2900
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2440
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19344
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19338
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19333
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libuuid
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19340
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19347
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19341
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19337
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19343
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: pango
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19339
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19342
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19349
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gtk3
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19332
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19345
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19336
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsoup
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19348
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19346
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19335
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstemmer
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19334
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fontconfig
from: libappstream-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1074
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd314
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5632
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5963
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2602
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Public Domain and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd317
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4373
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2900
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5966
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1017
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2888
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6046
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6043
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10682
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10783
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10685
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1071
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2440
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND (FTL OR GPL-2.0-or-later) AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19351
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2605
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Public Domain and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2903
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd914
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2443
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND (FTL OR GPL-2.0-or-later) AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5629
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10780
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2891
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19354
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5630
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2889
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd915
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5964
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19352
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10781
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2901
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd315
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10683
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1018
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6211
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2603
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6044
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1072
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd850
type: software_Package
supplied by: SPDXRef-gnrtd915
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1046
type: software_Package
supplied by: SPDXRef-gnrtd1072
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10679
type: software_Package
supplied by: SPDXRef-gnrtd10683
software download location: NOASSERTION
summary: C stemming algorithm library
software package version: 0:0-13.oe2403sp4
software home page: https://snowballstem.org/
description: Snowball stemming algorithms for use in Information Retrieval Snowball provides access to efficient algorithms for calculating a "stemmed" form of a word. This is a form with most of the common morphological endings removed; hopefully representing a common linguistic base form. This is most useful in building search engines and information retrieval software; for example, a search with stemming enabled should be able to find a document containing "cycling" given the query "cycles". Snowball provides algorithms for several (mainly European) languages. It also provides access to the classic Porter stemming algorithm for English: although this has been superseded by an improved algorithm, the original algorithm may be of interest to information retrieval researchers wishing to reproduce results of earlier experiments.
name: libstemmer
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19331
type: software_Package
supplied by: SPDXRef-gnrtd19352
software download location: NOASSERTION
summary: AppStream Abstraction Library
software package version: 0:0.8.2-1.oe2403sp4
software home page: http://people.freedesktop.org/~hughsient/appstream-glib/
description: The library provides GObjects and helper methods for easier reading and Write AppStream metadata. At the same time, it provides a simple DOM implementation to achieve more efficient conversion between edit nodes and standard XML.
name: libappstream-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd311
type: software_Package
supplied by: SPDXRef-gnrtd315
software download location: NOASSERTION
summary: Universally unique ID library
software package version: 0:2.39.1-38.oe2403sp4
software home page: https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
description: This package is the universally unique ID library.
name: libuuid
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5608
type: software_Package
supplied by: SPDXRef-gnrtd5630
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-7.oe2403sp4
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1947
type: software_Package
supplied by: SPDXRef-gnrtd2603
software download location: NOASSERTION
summary: Fontconfig is a library for configuring and customizing font access
software package version: 0:2.15.0-2.oe2403sp4
software home page: http://fontconfig.org
description: Fontconfig provide different font according to requirements specified by applications,discover new fonts when installed automatically be used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display
name: fontconfig
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd929
type: software_Package
supplied by: SPDXRef-gnrtd1018
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-34.oe2403sp4
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2424
type: software_Package
supplied by: SPDXRef-gnrtd2441
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-5.oe2403sp4
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2895
type: software_Package
supplied by: SPDXRef-gnrtd2901
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10749
type: software_Package
supplied by: SPDXRef-gnrtd10781
software download location: NOASSERTION
summary: An HTTP library implementation
software package version: 0:2.74.3-21.oe2403sp4
software home page: https://wiki.gnome.org/Projects/libsoup
description: libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.
name: libsoup
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5999
type: software_Package
supplied by: SPDXRef-gnrtd6211
software download location: NOASSERTION
summary: GTK+ graphical user interface library
software package version: 0:3.24.52-1.oe2403sp4
software home page: https://www.gtk.org
description: GTK+ is an object-oriented widget toolkit written in the programming language C; it has a C-based object-oriented architecture that allows for maximum flexibility. The GTK+ library contains a set of graphical control elements (widgets)for creating graphical user interfaces. This package contains version 3 of GTK+.
name: gtk3
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6038
type: software_Package
supplied by: SPDXRef-gnrtd6044
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5918
type: software_Package
supplied by: SPDXRef-gnrtd5964
software download location: NOASSERTION
summary: System for layout and rendering of internationalized text
software package version: 0:1.51.0-1.oe2403sp4
software home page: https://pango.gnome.org/
description: Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is needed, though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handling for GTK+. Pango is designed to be modular; the core Pango layout engine can be used with different font backends. The integration of Pango with Cairo provides a complete solution with high quality text handling and graphics rendering.
name: pango
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2871
type: software_Package
supplied by: SPDXRef-gnrtd2889
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp4
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0