type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd1073
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1074
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd348
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd349
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93643
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd7543
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1140
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1141
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd841
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19187
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5294
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5295
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd496
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd497
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7217
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd7218
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7526
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: librepo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5291
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5292
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19185
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd843
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1019
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1017
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd627
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd628
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7214
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd7215
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93641
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd389
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16004
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16005
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7467
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: libmodulemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd260
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6045
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6046
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd75
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16007
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16008
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1137
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1138
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd345
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd346
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6042
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6043
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107091
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd392
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7524
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: librepo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19183
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd493
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd494
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19181
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4373
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd71
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107093
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4373
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd630
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd631
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1016
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1017
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1070
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1071
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7469
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: libmodulemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd49
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd7540
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107075
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107079
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107083
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107085
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fuse
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107082
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bubblewrap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107068
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107066
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ostree
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107072
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107088
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107074
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107067
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107089
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107073
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107076
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107069
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107087
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107084
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107077
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107070
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: librepo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107086
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107071
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libmodulemd
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107080
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107078
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107081
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107090
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16005
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6046
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd494
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd75
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd349
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd631
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7540
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4373
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1138
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd628
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7215
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7218
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16008
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd346
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1017
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5295
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6043
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1141
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd49
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1071
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd497
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd389
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7543
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5292
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1074
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd347
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5293
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7468
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7216
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1018
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd842
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1072
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16006
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107092
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93642
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd38
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19186
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6044
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd495
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7525
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1139
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19182
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd629
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93635
type: software_Package
supplied by: SPDXRef-gnrtd93642
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp4
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19052
type: software_Package
supplied by: SPDXRef-gnrtd19186
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-4.oe2403sp4
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19059
type: software_Package
supplied by: SPDXRef-gnrtd19182
software download location: NOASSERTION
summary: Tool for managing bootable, immutable filesystem trees
software package version: 0:2024.4-1.oe2403sp4
software home page: https://ostree.readthedocs.io/en/latest/
description: This project is now known as "libostree", though it is still appropriate to use the previous name: "OSTree" (or "ostree"). The focus is on projects which use libostree's shared library, rather than users directly invoking the command line tools (except for build systems). However, in most of the rest of the documentation, we will use the term "OSTree", since it's slightly shorter, and changing all documentation at once is impractical.
name: ostree
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7456
type: software_Package
supplied by: SPDXRef-gnrtd7468
software download location: NOASSERTION
summary: C Library for manipulating module metadata files
software package version: 0:2.15.0-1.oe2403sp4
software home page: https://github.com/fedora-modularity/libmodulemd
description: The libmodulemd API provides a number of convenience tools for interacting with repodata (that is, streams of YAML that contains information on multiple streams, default data and translations).
name: libmodulemd
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd613
type: software_Package
supplied by: SPDXRef-gnrtd629
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-6.oe2403sp4
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd839
type: software_Package
supplied by: SPDXRef-gnrtd842
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp4
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7516
type: software_Package
supplied by: SPDXRef-gnrtd7525
software download location: NOASSERTION
summary: Repodata downloading library
software package version: 0:1.15.2-3.oe2403sp4
software home page: https://github.com/rpm-software-management/librepo
description: A library providing C and Python (libcURL like) API to downloading repository metadata.
name: librepo
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7530
type: software_Package
supplied by: SPDXRef-gnrtd7541
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp4
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1046
type: software_Package
supplied by: SPDXRef-gnrtd1072
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5286
type: software_Package
supplied by: SPDXRef-gnrtd5293
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-4.oe2403sp4
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107065
type: software_Package
supplied by: SPDXRef-gnrtd107092
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-4.oe2403sp4
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd275
type: software_Package
supplied by: SPDXRef-gnrtd495
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-7.oe2403sp4
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd369
type: software_Package
supplied by: SPDXRef-gnrtd390
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: software_Package
supplied by: SPDXRef-gnrtd73
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16000
type: software_Package
supplied by: SPDXRef-gnrtd16006
software download location: NOASSERTION
summary: Core execution tool for unprivileged containers
software package version: 0:0.8.0-2.oe2403sp4
software home page: https://github.com/projectatomic/bubblewrap
description: There is an effort in the Linux kernel called user namespaces which attempts to allow unprivileged users to use container features.
name: bubblewrap
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7209
type: software_Package
supplied by: SPDXRef-gnrtd7216
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35
type: software_Package
supplied by: SPDXRef-gnrtd38
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: software_Package
supplied by: SPDXRef-gnrtd262
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd329
type: software_Package
supplied by: SPDXRef-gnrtd347
software download location: NOASSERTION
summary: User space File System of fuse2
software package version: 0:2.9.9-12.oe2403sp4
software home page: https://fuse.sf.net
description: FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel. The FUSE project consists of two components: the fuse kernel module (maintained in the regular kernel repositories) and the libfuse userspace library (maintained in this repository). libfuse provides the reference implementation for communicating with the FUSE kernel module.
name: fuse
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd42
type: software_Package
supplied by: SPDXRef-gnrtd47
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd929
type: software_Package
supplied by: SPDXRef-gnrtd1018
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-34.oe2403sp4
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1112
type: software_Package
supplied by: SPDXRef-gnrtd1139
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6038
type: software_Package
supplied by: SPDXRef-gnrtd6044
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1