type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd2269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2270
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9347
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9579
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: libmodulemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107993
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4208
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1629
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1627
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd397
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd398
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107995
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4208
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9596
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9597
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd266
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5284
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5285
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2153
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16177
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16178
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2272
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2273
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1512
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1513
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd268
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd269
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94411
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4208
from: librepo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1509
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1510
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9599
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9600
from: libsolv
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd190
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1626
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1627
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd411
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd412
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16174
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16175
from: bubblewrap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1544
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2156
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd408
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd409
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19281
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4208
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19643
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4208
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1542
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: json-c
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9581
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: libmodulemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19641
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4208
from: rpm-ostree-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd85
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94409
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: skopeo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd422
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd423
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd419
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd420
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6129
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd6130
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6132
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd6133
from: json-glib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd400
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd401
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9350
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19283
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4208
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9630
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4208
from: librepo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5281
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5282
from: polkit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd187
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd87
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd88
from: fuse
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107984
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-ostree-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107971
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107991
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: polkit-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107992
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ostree
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107973
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107979
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsolv
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107983
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fuse
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107980
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107970
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libmodulemd
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107969
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: librepo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107982
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107985
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107968
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107986
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107981
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bubblewrap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107990
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107976
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107974
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107978
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107977
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-c
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107975
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107972
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: json-glib
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107987
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107988
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: skopeo
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107989
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1627
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2273
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6133
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16175
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6130
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2270
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1513
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9600
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4208
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd88
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd420
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd412
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9347
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2153
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd401
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5285
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2156
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9597
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd398
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5282
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd423
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd409
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1510
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd85
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9350
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd269
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16178
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1628
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2271
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19642
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6131
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107994
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19282
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd410
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd86
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94410
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd421
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd188
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9629
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9580
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1543
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1511
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd399
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9598
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd267
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5283
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16176
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9341
type: software_Package
supplied by: SPDXRef-gnrtd9348
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19633
type: software_Package
supplied by: SPDXRef-gnrtd19642
software download location: NOASSERTION
summary: Shared library for rpm-ostree
software package version: 0:2024.4-4.oe2403sp4
software home page: https://github.com/coreos/rpm-ostree
description: The rpm-ostree-libs package includes the shared library for rpm-ostree.
name: rpm-ostree-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree-libs@2024.4-4.oe2403sp4?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94403
type: software_Package
supplied by: SPDXRef-gnrtd94410
software download location: NOASSERTION
summary: Work with remote images registries - retrieving information, images, signing content
software package version: 1:1.14.2-6.oe2403sp4
software home page: https://github.com/containers/skopeo
description: A command line utility that performs various operations on container images and image repositories
name: skopeo
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/skopeo@1.14.2-6.oe2403sp4?arch=x86_64&epoch=1&upstream=skopeo-1.14.2-6.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: software_Package
supplied by: SPDXRef-gnrtd188
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1540
type: software_Package
supplied by: SPDXRef-gnrtd1543
software download location: NOASSERTION
summary: JSON implementation in C
software package version: 0:0.17-7.oe2403sp4
software home page: https://github.com/json-c/json-c
description: JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159.
name: json-c
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/json-c@0.17-7.oe2403sp4?arch=x86_64&epoch=0&upstream=json-c-0.17-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9587
type: software_Package
supplied by: SPDXRef-gnrtd9598
software download location: NOASSERTION
summary: Package dependency solver
software package version: 0:0.7.24-5.oe2403sp4
software home page: https://github.com/openSUSE/libsolv
description: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies.
name: libsolv
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libsolv@0.7.24-5.oe2403sp4?arch=x86_64&epoch=0&upstream=libsolv-0.7.24-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33
type: software_Package
supplied by: SPDXRef-gnrtd399
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-7.oe2403sp4
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libcap-2.69-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2244
type: software_Package
supplied by: SPDXRef-gnrtd2271
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd238
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1471
type: software_Package
supplied by: SPDXRef-gnrtd1511
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libarchive@3.7.1-11.oe2403sp4?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-11.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1562
type: software_Package
supplied by: SPDXRef-gnrtd1628
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-34.oe2403sp4
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/rpm-libs@4.18.2-34.oe2403sp4?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9620
type: software_Package
supplied by: SPDXRef-gnrtd9629
software download location: NOASSERTION
summary: Repodata downloading library
software package version: 0:1.15.2-3.oe2403sp4
software home page: https://github.com/rpm-software-management/librepo
description: A library providing C and Python (libcURL like) API to downloading repository metadata.
name: librepo
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/librepo@1.15.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=librepo-1.15.2-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9573
type: software_Package
supplied by: SPDXRef-gnrtd9580
software download location: NOASSERTION
summary: C Library for manipulating module metadata files
software package version: 0:2.15.0-1.oe2403sp4
software home page: https://github.com/fedora-modularity/libmodulemd
description: The libmodulemd API provides a number of convenience tools for interacting with repodata (that is, streams of YAML that contains information on multiple streams, default data and translations).
name: libmodulemd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libmodulemd@2.15.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libmodulemd-2.15.0-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd68
type: software_Package
supplied by: SPDXRef-gnrtd86
software download location: NOASSERTION
summary: User space File System of fuse2
software package version: 0:2.9.9-12.oe2403sp4
software home page: https://fuse.sf.net
description: FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel. The FUSE project consists of two components: the fuse kernel module (maintained in the regular kernel repositories) and the libfuse userspace library (maintained in this repository). libfuse provides the reference implementation for communicating with the FUSE kernel module.
name: fuse
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/fuse@2.9.9-12.oe2403sp4?arch=x86_64&epoch=0&upstream=fuse-2.9.9-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5276
type: software_Package
supplied by: SPDXRef-gnrtd5283
software download location: NOASSERTION
summary: Libraries for polkit
software package version: 0:123-4.oe2403sp4
software home page: http://www.freedesktop.org/wiki/Software/polkit
description: Libraries files for polkit.
name: polkit-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/polkit-libs@123-4.oe2403sp4?arch=x86_64&epoch=0&upstream=polkit-123-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19158
type: software_Package
supplied by: SPDXRef-gnrtd19282
software download location: NOASSERTION
summary: Tool for managing bootable, immutable filesystem trees
software package version: 0:2024.4-1.oe2403sp4
software home page: https://ostree.readthedocs.io/en/latest/
description: This project is now known as "libostree", though it is still appropriate to use the previous name: "OSTree" (or "ostree"). The focus is on projects which use libostree's shared library, rather than users directly invoking the command line tools (except for build systems). However, in most of the rest of the documentation, we will use the term "OSTree", since it's slightly shorter, and changing all documentation at once is impractical.
name: ostree
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/ostree@2024.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=ostree-2024.4-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16170
type: software_Package
supplied by: SPDXRef-gnrtd16176
software download location: NOASSERTION
summary: Core execution tool for unprivileged containers
software package version: 0:0.8.0-2.oe2403sp4
software home page: https://github.com/projectatomic/bubblewrap
description: There is an effort in the Linux kernel called user namespaces which attempts to allow unprivileged users to use container features.
name: bubblewrap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bubblewrap@0.8.0-2.oe2403sp4?arch=x86_64&epoch=0&upstream=bubblewrap-0.8.0-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd107967
type: software_Package
supplied by: SPDXRef-gnrtd107994
software download location: NOASSERTION
summary: Hybrid image/package system
software package version: 0:2024.4-4.oe2403sp4
software home page: https://github.com/coreos/rpm-ostree
description: rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additional packages, providing a "best of both worlds" approach.
name: rpm-ostree
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/rpm-ostree@2024.4-4.oe2403sp4?arch=x86_64&epoch=0&upstream=rpm-ostree-2024.4-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6125
type: software_Package
supplied by: SPDXRef-gnrtd6131
software download location: NOASSERTION
summary: Library for lightweight data-interchange format
software package version: 0:1.8.0-1.oe2403sp4
software home page: https://wiki.gnome.org/Projects/JsonGlib
description: JSON-GLib is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.
name: json-glib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/json-glib@1.8.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=json-glib-1.8.0-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd246
type: software_Package
supplied by: SPDXRef-gnrtd267
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd407
type: software_Package
supplied by: SPDXRef-gnrtd410
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd416
type: software_Package
supplied by: SPDXRef-gnrtd421
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2138
type: software_Package
supplied by: SPDXRef-gnrtd2154
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-6.oe2403sp4
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/sqlite@3.42.0-6.oe2403sp4?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-6.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0