type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-18T18:19:57Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-18T18:19:57Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/aarch64-862ca6fa-7809-4d26-a92a-451d237033e3-specv3/SPDXRef-gnrtd965
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd967
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd488
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: libffi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd191
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4219
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4220
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd169
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd170
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12084
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4762
from: ffmpeg
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd42
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd43
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1123
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1124
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12704
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd12705
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1026
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12069
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1108
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1126
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1127
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1032
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1033
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd486
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: libffi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1150
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1151
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12701
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd12702
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1147
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1148
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1035
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1036
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd165
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12082
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4762
from: ffmpeg
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1024
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1025
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd99
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd100
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd167
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd168
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1009
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1010
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1108
from: libvpx
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1226
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1227
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd97
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4216
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4217
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1021
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1022
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1223
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1224
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd172
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd173
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd193
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd194
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1006
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1007
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12700
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libffi
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12697
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: alsa-lib
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12696
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12695
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gtk3
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12687
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12692
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12688
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12693
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12685
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12690
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12684
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12689
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libvpx
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12694
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ffmpeg
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12699
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12686
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12691
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12698
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: firefox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1224
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1127
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1036
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd170
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1108
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd43
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd97
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1148
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12705
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later OR MPL-1.1 OR GPL-2.0-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4217
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd191
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1124
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd173
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1151
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1007
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1022
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1025
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1227
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1010
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12702
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later OR MPL-1.1 OR GPL-2.0-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd194
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd109
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd100
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1033
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4762
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd168
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4220
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd487
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd192
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12703
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd171
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4218
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd166
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd966
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd44
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1149
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1023
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1225
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd98
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12083
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1125
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1008
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16
type: software_Package
supplied by: SPDXRef-gnrtd44
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd484
type: software_Package
supplied by: SPDXRef-gnrtd487
software download location: NOASSERTION
summary: A Portable Foreign Function Interface Library
software package version: 0:3.4.4-6.oe2403
software home page: http://sourceware.org/libffi
description: Compilers for high level languages generate code that follows certain conventions. These conventions are necessary, in part, for separate compilation to work. One such convention is the "calling convention". The "calling convention" is a set of assumptions made by the compiler about where function arguments will be found on entry to a function. A "calling convention" also specifies where the return value for a function is found. Some programs may not know at the time of compilation what arguments are to be passed to a function. For instance, an interpreter may be told at run-time about the number and types of arguments used to call a given function. Libffi can be used in such programs to provide a bridge from the interpreter program to compiled code. The libffi library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run-time. FFI stands for Foreign Function Interface. A foreign function interface is the popular name for the interface that allows code written in one language to call code written in another language. The libffi library really only provides the lowest, machine dependent layer of a fully featured foreign function interface. A layer must exist above libffi that handles type conversions for values passed between the two languages.
name: libffi
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1015
type: software_Package
supplied by: SPDXRef-gnrtd1023
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4213
type: software_Package
supplied by: SPDXRef-gnrtd4218
software download location: NOASSERTION
summary: the user space library that developers compile ALSA applications against
software package version: 0:1.2.10-4.oe2403
software home page: https://alsa-project.org/
description: The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib
name: alsa-lib
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: software_Package
supplied by: SPDXRef-gnrtd1034
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12020
type: software_Package
supplied by: SPDXRef-gnrtd12083
software download location: NOASSERTION
summary: Digital VCR and streaming server
software package version: 0:6.1.1-11.oe2403
software home page: http://ffmpeg.org/
description: FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.
name: ffmpeg
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd999
type: software_Package
supplied by: SPDXRef-gnrtd1008
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1143
type: software_Package
supplied by: SPDXRef-gnrtd1149
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd995
type: software_Package
supplied by: SPDXRef-gnrtd1027
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1118
type: software_Package
supplied by: SPDXRef-gnrtd1125
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-3.oe2403
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12064
type: software_Package
supplied by: SPDXRef-gnrtd12070
software download location: NOASSERTION
summary: VP8/VP9 Video Codec SDK
software package version: 0:1.13.1-2.oe2403
software home page: http://www.webmproject.org/code/
description: libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.
name: libvpx
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12683
type: software_Package
supplied by: SPDXRef-gnrtd12703
software download location: NOASSERTION
summary: Mozilla Firefox Web browser
software package version: 0:128.8.0-1.oe2403
software home page: https://www.mozilla.org/firefox/
description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.
name: firefox
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: software_Package
supplied by: SPDXRef-gnrtd171
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-36.oe2403
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1166
type: software_Package
supplied by: SPDXRef-gnrtd1225
software download location: NOASSERTION
summary: GTK+ graphical user interface library
software package version: 0:3.24.41-2.oe2403
software home page: https://www.gtk.org
description: GTK+ is an object-oriented widget toolkit written in the programming language C; it has a C-based object-oriented architecture that allows for maximum flexibility. The GTK+ library contains a set of graphical control elements (widgets)for creating graphical user interfaces. This package contains version 3 of GTK+.
name: gtk3
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd963
type: software_Package
supplied by: SPDXRef-gnrtd966
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: software_Package
supplied by: SPDXRef-gnrtd98
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: software_Package
supplied by: SPDXRef-gnrtd166
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-36.oe2403
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd12
type: software_Package
supplied by: SPDXRef-gnrtd192
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1