type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd1348
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1349
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1073
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1074
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19183
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19173
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19174
from: fuse3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7214
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd7215
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd731
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd341
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6664
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6665
from: gnupg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19159
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19160
from: grub2-efi-aa64
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19181
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd71
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1345
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1346
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd515
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd516
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2902
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2903
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd381
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd382
from: libmount
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd260
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd513
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16860
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16861
from: dracut
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1140
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1141
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd75
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd916
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6667
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6668
from: gnupg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1137
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1138
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19162
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19163
from: grub2-efi-aa64
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1070
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1071
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1121
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1122
from: libgpg-error
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd733
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd341
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16863
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16864
from: dracut
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd913
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd914
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1118
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1119
from: libgpg-error
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd378
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd379
from: libmount
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7217
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd7218
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2899
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2900
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19170
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19171
from: fuse3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19065
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19061
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19177
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19165
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fuse3
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19071
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: grub2-efi-aa64
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19176
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19068
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19069
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19179
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dracut
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19064
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19175
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libselinux
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19178
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgpg-error
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19067
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19066
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gnupg2
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19062
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19164
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19180
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libmount
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19060
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19063
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19070
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1074
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd341
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16861
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4373
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16864
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2900
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6665
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd516
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1119
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1071
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19171
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19160
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6668
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1141
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1349
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1122
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19163
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1138
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd379
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7215
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7218
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2903
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1346
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd75
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd914
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd382
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19174
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1347
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd915
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1139
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7216
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2901
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1120
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19182
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16862
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19172
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6666
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd380
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd732
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1072
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19161
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd850
type: software_Package
supplied by: SPDXRef-gnrtd915
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7209
type: software_Package
supplied by: SPDXRef-gnrtd7216
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd729
type: software_Package
supplied by: SPDXRef-gnrtd732
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-8.oe2403sp4
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24
type: software_Package
supplied by: SPDXRef-gnrtd514
software download location: NOASSERTION
summary: SELinux library and simple utilities
software package version: 0:3.5-9.oe2403sp4
software home page: https://github.com/SELinuxProject/selinux/wiki
description: libselinux provides an interface to get and set process and file security contexts and to obtain security policy decisions.
name: libselinux
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1046
type: software_Package
supplied by: SPDXRef-gnrtd1072
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6626
type: software_Package
supplied by: SPDXRef-gnrtd6666
software download location: NOASSERTION
summary: Utility for secure communication and data storage
software package version: 0:2.4.3-15.oe2403sp4
software home page: https://gnupg.org/
description: GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. GnuPG 2.0 adds support for smart cards and S/MIME encryption and signing to the base GnuPG package.
name: gnupg2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1244
type: software_Package
supplied by: SPDXRef-gnrtd1347
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1116
type: software_Package
supplied by: SPDXRef-gnrtd1120
software download location: NOASSERTION
summary: Library for common error values and messages in GnuPG components.
software package version: 0:1.47-1.oe2403sp4
software home page: https://www.gnupg.org/related_software/libgpg-error/
description: The libgpg-error package contains a library that originally defines common error values for all GnuPG components. Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon. Because Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.
name: libgpg-error
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19072
type: software_Package
supplied by: SPDXRef-gnrtd19161
software download location: NOASSERTION
summary: GRUB for EFI systems.
software package version: 1:2.12-52.oe2403sp4
software home page: http://www.gnu.org/software/grub/
description: %{desc} This subpackage provides support for efi-aa64 systems.
name: grub2-efi-aa64
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: software_Package
supplied by: SPDXRef-gnrtd262
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd373
type: software_Package
supplied by: SPDXRef-gnrtd380
software download location: NOASSERTION
summary: Library for device mounting
software package version: 0:2.39.1-38.oe2403sp4
software home page: https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
description: This package is the library for device mounting.
name: libmount
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19059
type: software_Package
supplied by: SPDXRef-gnrtd19182
software download location: NOASSERTION
summary: Tool for managing bootable, immutable filesystem trees
software package version: 0:2024.4-1.oe2403sp4
software home page: https://ostree.readthedocs.io/en/latest/
description: This project is now known as "libostree", though it is still appropriate to use the previous name: "OSTree" (or "ostree"). The focus is on projects which use libostree's shared library, rather than users directly invoking the command line tools (except for build systems). However, in most of the rest of the documentation, we will use the term "OSTree", since it's slightly shorter, and changing all documentation at once is impractical.
name: ostree
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: software_Package
supplied by: SPDXRef-gnrtd73
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2895
type: software_Package
supplied by: SPDXRef-gnrtd2901
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16834
type: software_Package
supplied by: SPDXRef-gnrtd16862
software download location: NOASSERTION
summary: Initramfs generator using udev
software package version: 0:059-16.oe2403sp4
software home page: https://dracut.wiki.kernel.org/
description: dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.
name: dracut
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1112
type: software_Package
supplied by: SPDXRef-gnrtd1139
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19166
type: software_Package
supplied by: SPDXRef-gnrtd19172
software download location: NOASSERTION
summary: User space File System of fuse3
software package version: 0:3.16.2-3.oe2403sp4
software home page: http://fuse.sf.net
description: FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel. The FUSE project consists of two components: the fuse kernel module (maintained in the regular kernel repositories) and the libfuse userspace library (maintained in this repository). libfuse provides the reference implementation for communicating with the FUSE kernel module.
name: fuse3
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0