type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd2269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2270
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2350
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd397
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd398
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7126
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd7127
from: device-mapper
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2153
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2323
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2324
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd514
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2326
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2327
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd134
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: ncurses-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56163
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56164
from: isula-rust-extensions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2272
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2273
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1512
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1513
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6814
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2623
from: yajl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56140
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56141
from: libwebsockets
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56160
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56161
from: isula-rust-extensions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56171
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56172
from: lib-shim-v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1509
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1510
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56143
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56144
from: libwebsockets
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd190
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2347
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd510
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd511
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd411
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd412
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35284
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd35285
from: libisula
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4799
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: abseil-cpp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4803
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: protobuf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4801
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: abseil-cpp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4853
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4854
from: grpc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2156
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd408
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd409
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1417
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4856
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4857
from: grpc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7129
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd7130
from: device-mapper
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd132
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: ncurses-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd422
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd423
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56182
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56183
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd419
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd420
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6816
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2623
from: yajl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd400
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd401
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35287
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd35288
from: libisula
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd187
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4805
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: protobuf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1420
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56185
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56186
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56174
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56175
from: lib-shim-v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56153
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56180
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56154
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libselinux
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56167
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lib-shim-v2
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56179
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56150
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: yajl
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56165
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: grpc
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56134
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ncurses-libs
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56178
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libisula
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56135
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libwebsockets
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56151
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: abseil-cpp
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56155
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libseccomp
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56149
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56147
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56152
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56166
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56177
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56156
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: isula-rust-extensions
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56181
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56148
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56133
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56176
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56145
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: protobuf
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56132
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: device-mapper
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56146
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: iSulad
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56183
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4857
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2273
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56144
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 and Public Domain and BSD and MIT and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2347
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7127
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56175
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56172
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2270
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56141
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 and Public Domain and BSD and MIT and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1513
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56161
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd420
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35288
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd412
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7130
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd511
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56164
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1418
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2623
type: simplelicensing_LicenseExpression
simplelicensing license expression: ISC
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2153
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd401
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2156
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2327
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56186
type: simplelicensing_LicenseExpression
simplelicensing license expression: Mulan PSL v2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd398
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd423
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd409
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2324
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1510
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4854
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35285
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2350
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4804
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2271
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4800
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd133
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6815
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4855
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7128
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56162
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd410
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd421
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2325
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd188
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56173
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1419
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1511
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56142
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd399
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56184
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35286
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2319
type: software_Package
supplied by: SPDXRef-gnrtd2325
software download location: NOASSERTION
summary: Interface to the syscall filtering mechanism
software package version: 0:2.5.4-5.oe2403sp4
software home page: https://github.com/seccomp/libseccomp
description: The libseccomp library provides an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to abstract away the underlying BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.
name: libseccomp
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libseccomp@2.5.4-5.oe2403sp4?arch=x86_64&epoch=0&upstream=libseccomp-2.5.4-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4790
type: software_Package
supplied by: SPDXRef-gnrtd4804
software download location: NOASSERTION
summary: Protocol Buffers - Google's data interchange format
software package version: 0:25.1-13.oe2403sp4
software home page: https://github.com/protocolbuffers/protobuf
description: Protocol Buffers (a.k.a., protobuf) are Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data. You can find protobuf's documentation on the Google Developers site.
name: protobuf
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/protobuf@25.1-13.oe2403sp4?arch=x86_64&epoch=0&upstream=protobuf-25.1-13.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: software_Package
supplied by: SPDXRef-gnrtd188
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33
type: software_Package
supplied by: SPDXRef-gnrtd399
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-7.oe2403sp4
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libcap-2.69-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2244
type: software_Package
supplied by: SPDXRef-gnrtd2271
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6812
type: software_Package
supplied by: SPDXRef-gnrtd6815
software download location: NOASSERTION
summary: Yet Another JSON Library
software package version: 0:2.1.0-21.oe2403sp4
software home page: https://github.com/lloyd/yajl
description: yajl is a small event-driven JSON parser written in ANSI C, and a small validating JSON generator.
name: yajl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/yajl@2.1.0-21.oe2403sp4?arch=x86_64&epoch=0&upstream=yajl-2.1.0-21.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1471
type: software_Package
supplied by: SPDXRef-gnrtd1511
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libarchive@3.7.1-11.oe2403sp4?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-11.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd238
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2173
type: software_Package
supplied by: SPDXRef-gnrtd2348
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15
type: software_Package
supplied by: SPDXRef-gnrtd512
software download location: NOASSERTION
summary: SELinux library and simple utilities
software package version: 0:3.5-9.oe2403sp4
software home page: https://github.com/SELinuxProject/selinux/wiki
description: libselinux provides an interface to get and set process and file security contexts and to obtain security policy decisions.
name: libselinux
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=x86_64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35280
type: software_Package
supplied by: SPDXRef-gnrtd35286
software download location: NOASSERTION
summary: Huawei container json, log and utils C Library
software package version: 0:2.1.5-1.oe2403sp4
software home page: https://gitee.com/openeuler/lcr
description: the libisula package contains json, log and utils libraries for running iSula applications.
name: libisula
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libisula@2.1.5-1.oe2403sp4?arch=x86_64&epoch=0&upstream=lcr-2.1.5-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd7118
type: software_Package
supplied by: SPDXRef-gnrtd7128
software download location: NOASSERTION
summary: Low level logical volume management
software package version: 8:1.02.195-23.oe2403sp4
software home page: http://sources.redhat.com/dm
description: Manages logical devices that use the device-mapper driver.
name: device-mapper
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/device-mapper@1.02.195-23.oe2403sp4?arch=x86_64&epoch=8&upstream=lvm2-2.03.21-23.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56131
type: software_Package
supplied by: SPDXRef-gnrtd56184
software download location: NOASSERTION
summary: Lightweight Container Runtime Daemon
software package version: 0:2.1.6-2.oe2403sp4
software home page: https://gitee.com/openeuler/iSulad
description: This is a umbrella project for gRPC-services based Lightweight Container Runtime Daemon, written by C.
name: iSulad
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/iSulad@2.1.6-2.oe2403sp4?arch=x86_64&epoch=0&upstream=iSulad-2.1.6-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56136
type: software_Package
supplied by: SPDXRef-gnrtd56142
software download location: NOASSERTION
summary: A lightweight C library for Websockets
software package version: 0:4.3.3-5.oe2403sp4
software home page: https://libwebsockets.org
description: Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop.
name: libwebsockets
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libwebsockets@4.3.3-5.oe2403sp4?arch=x86_64&epoch=0&upstream=libwebsockets-4.3.3-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4809
type: software_Package
supplied by: SPDXRef-gnrtd4855
software download location: NOASSERTION
summary: A modern, open source high performance RPC framework that can run in any environment
software package version: 0:1.60.0-5.oe2403sp4
software home page: https://www.grpc.io
description: gRPC is a modern open source high performance RPC framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication. It is also applicable in last mile of distributed computing to connect devices, mobile applications and browsers to backend services.
name: grpc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/grpc@1.60.0-5.oe2403sp4?arch=x86_64&epoch=0&upstream=grpc-1.60.0-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd407
type: software_Package
supplied by: SPDXRef-gnrtd410
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56168
type: software_Package
supplied by: SPDXRef-gnrtd56173
software download location: NOASSERTION
summary: lib-shim-v2 is shim v2 ttrpc client which is called by iSulad.
software package version: 0:0.0.1-12.oe2403sp4
software home page: https://gitee.com/openeuler/lib-shim-v2
description: Based on Rust programming language, as a shim v2 ttrpc client, it is called by iSulad.
name: lib-shim-v2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/lib-shim-v2@0.0.1-12.oe2403sp4?arch=x86_64&epoch=0&upstream=lib-shim-v2-0.0.1-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56157
type: software_Package
supplied by: SPDXRef-gnrtd56162
software download location: NOASSERTION
summary: isula-rust-extensions is a rust-extension library for iSulad.
software package version: 0:0.0.2-2.oe2403sp4
software home page: https://gitee.com/openeuler/isula-rust-extensions
description: Based on Rust programming language, rust-extension library for iSulad.
name: isula-rust-extensions
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/isula-rust-extensions@0.0.2-2.oe2403sp4?arch=x86_64&epoch=0&upstream=isula-rust-extensions-0.0.2-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4795
type: software_Package
supplied by: SPDXRef-gnrtd4800
software download location: NOASSERTION
summary: C++ Common Libraries
software package version: 0:20230802.1-6.oe2403sp4
software home page: https://abseil.io
description: Abseil is an open-source collection of C++ library code designed to augment the C++ standard library. The Abseil library code is collected from Google's own C++ code base, has been extensively tested and used in production, and is the same code we depend on in our daily coding lives. In some cases, Abseil provides pieces missing from the C++ standard; in others, Abseil provides alternatives to the standard for special needs we've found through usage in the Google code base. We denote those cases clearly within the library code we provide you. Abseil is not meant to be a competitor to the standard library; we've just found that many of these utilities serve a purpose within our code base, and we now want to provide those resources to the C++ community as a whole.
name: abseil-cpp
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/abseil-cpp@20230802.1-6.oe2403sp4?arch=x86_64&epoch=0&upstream=abseil-cpp-20230802.1-6.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd124
type: software_Package
supplied by: SPDXRef-gnrtd133
software download location: NOASSERTION
summary: Libraries for ncurses
software package version: 0:6.4-13.oe2403sp4
software home page: https://invisible-island.net/ncurses/ncurses.html
description: Libraries for ncurses.
name: ncurses-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/ncurses-libs@6.4-13.oe2403sp4?arch=x86_64&epoch=0&upstream=ncurses-6.4-13.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd416
type: software_Package
supplied by: SPDXRef-gnrtd421
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2138
type: software_Package
supplied by: SPDXRef-gnrtd2154
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-6.oe2403sp4
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/sqlite@3.42.0-6.oe2403sp4?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-6.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1337
type: software_Package
supplied by: SPDXRef-gnrtd1419
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0