type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46123
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46124
from: libjcat-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd268
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd269
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35704
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd35705
from: json-glib-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46120
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46121
from: libjcat-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1417
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10103
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10104
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35701
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd35702
from: json-glib-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3864
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd3865
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46107
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46108
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6156
from: libgusb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6129
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6130
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6153
from: libgusb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46136
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46137
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3867
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd3868
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6132
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6133
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11395
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd11396
from: libxmlb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5491
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5492
from: glib2-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2599
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1418
from: libcurl-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46139
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46140
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46104
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46105
from: fwupd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd266
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10106
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10107
from: libgudev
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1420
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2597
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1418
from: libcurl-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5488
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5489
from: glib2-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11392
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd11393
from: libxmlb
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46127
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46112
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fwupd
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46128
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46135
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46125
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2-devel
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46129
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgusb
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46113
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libjcat-devel
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46111
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxmlb
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46133
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46134
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib-devel
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46126
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl-devel
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46130
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46131
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgudev
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46110
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46132
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gnutls
from: fwupd-devel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3868
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46124
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11393
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5489
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46121
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10107
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6156
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6153
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6133
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46105
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5492
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1418
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6130
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46108
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46137
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35705
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46140
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10104
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11396
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3865
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd269
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35702
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46122
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6131
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46106
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35703
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2598
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5490
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46138
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd267
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1419
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10105
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3866
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11394
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11385
type: software_Package
supplied by: SPDXRef-gnrtd11394
software download location: NOASSERTION
summary: A library to help create and query binary XML blobs
software package version: 0:0.3.14-1.oe2403sp4
software home page: https://github.com/hughsie/libxmlb
description: XML is slow to parse and strings inside the document cannot be memory mapped as they do not have a trailing NUL char. The libxmlb library takes XML source, and converts it to a structured binary representation with a deduplicated string table -- where the strings have the NULs included. This allows an application to mmap the binary XML file, do an XPath query and return some strings without actually parsing the entire document. This is all done using (almost) zero allocations and no actual copying of the binary data.
name: libxmlb
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libxmlb@0.3.14-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libxmlb-0.3.14-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3843
type: software_Package
supplied by: SPDXRef-gnrtd3866
software download location: NOASSERTION
summary: The GNU Secure Communication Protocol Library
software package version: 0:3.8.2-16.oe2403sp4
software home page: https://www.gnutls.org/
description: GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.
name: gnutls
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gnutls@3.8.2-16.oe2403sp4?arch=x86_64&epoch=0&upstream=gnutls-3.8.2-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46042
type: software_Package
supplied by: SPDXRef-gnrtd46106
software download location: NOASSERTION
summary: Make updating firmware on Linux automatic, safe and reliable
software package version: 0:1.8.17-9.oe2403sp4
software home page: https://github.com/fwupd/fwupd
description: fwupd aims to make updating firmware on Linux automatic, safe and reliable.
name: fwupd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/fwupd@1.8.17-9.oe2403sp4?arch=x86_64&epoch=0&upstream=fwupd-1.8.17-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd246
type: software_Package
supplied by: SPDXRef-gnrtd267
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46114
type: software_Package
supplied by: SPDXRef-gnrtd46122
software download location: NOASSERTION
summary: Development package for libjcat
software package version: 0:0.1.13-2.oe2403sp4
software home page: https://github.com/hughsie/libjcat
description: Files for development with libjcat.
name: libjcat-devel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libjcat-devel@0.1.13-2.oe2403sp4?arch=x86_64&epoch=0&upstream=libjcat-0.1.13-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6137
type: software_Package
supplied by: SPDXRef-gnrtd6154
software download location: NOASSERTION
summary: GObject-based library for libusb1
software package version: 0:0.4.8-3.oe2403sp4
software home page: https://github.com/hughsie/libgusb
description: GUsb is a GObject wrapper for libusb1 that makes it easy to do asynchronous control, bulk and interrupt transfers with proper cancellation and integration into a mainloop.This makes it easy to integrate low level USB transfers with your high-level application or system daemon.
name: libgusb
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgusb@0.4.8-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libgusb-0.4.8-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35696
type: software_Package
supplied by: SPDXRef-gnrtd35703
software download location: NOASSERTION
summary: Development files for json-glib
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: json-glib-devel contains the header files for developing applications that want to make use of json-glib.
name: json-glib-devel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/json-glib-devel@1.8.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=json-glib-1.8.0-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10098
type: software_Package
supplied by: SPDXRef-gnrtd10105
software download location: NOASSERTION
summary: Library that provides GObject bindings for libudev
software package version: 0:238-3.oe2403sp4
software home page: https://wiki.gnome.org/Projects/libgudev
description: Library provides GObject bindings for libudev. It used to be part of udev, then merged into systemd. It's now a project on its own.
name: libgudev
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgudev@238-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libgudev-238-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46109
type: software_Package
supplied by: SPDXRef-gnrtd46138
software download location: NOASSERTION
summary: Development package for fwupd
software package version: 0:1.8.17-9.oe2403sp4
software home page: https://github.com/fwupd/fwupd
description: This package contains the development and installed test files for fwupd.
name: fwupd-devel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/fwupd-devel@1.8.17-9.oe2403sp4?arch=x86_64&epoch=0&upstream=fwupd-1.8.17-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1337
type: software_Package
supplied by: SPDXRef-gnrtd1419
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5387
type: software_Package
supplied by: SPDXRef-gnrtd5490
software download location: NOASSERTION
summary: Development files for the GLib library
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: Development files for the GLib library.
name: glib2-devel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glib2-devel@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6125
type: software_Package
supplied by: SPDXRef-gnrtd6131
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/json-glib@1.8.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=json-glib-1.8.0-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2593
type: software_Package
supplied by: SPDXRef-gnrtd2598
software download location: NOASSERTION
summary: Header files for libcurl
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: Header files for libcurl.
name: libcurl-devel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcurl-devel@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1