type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-01T18:10:15Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-01T18:10:15Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/x86_64-7b0acf2e-e07f-4961-8a75-f7f83d0dc8eb-specv3/SPDXRef-gnrtd1169
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1170
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1040
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1041
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4216
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4217
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd531
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11200
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd11201
from: emacs-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd972
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1145
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1146
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: ncurses-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd981
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd982
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd43
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd44
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11181
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: libXpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1043
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1044
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1030
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1031
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd992
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd990
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd989
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd990
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11271
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd11272
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11179
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: libXpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11268
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd11269
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd419
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd420
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1028
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd192
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd193
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd27
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd28
from: gmp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1035
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11203
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd11204
from: emacs-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd533
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd170
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd171
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1010
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1011
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd416
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd417
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1033
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd173
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd174
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd190
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1142
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1143
from: gnutls
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd974
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd95
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd252
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd253
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd30
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd31
from: gmp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1172
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1173
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4219
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4220
from: alsa-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1013
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1014
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: ncurses-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5355
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5357
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd47
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd91
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd92
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd255
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd256
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd984
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd982
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11264
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gnutls
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11267
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11261
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11260
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11253
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11263
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11247
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libtiff
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11256
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11252
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11248
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: giflib
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11255
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11262
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gmp
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11259
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libacl
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11265
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: alsa-lib
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11254
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11258
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: emacs-common
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11250
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11257
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libXpm
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11246
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11249
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11251
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ncurses-libs
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11266
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: emacs-lucid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd253
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd171
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GFDL-1.3-invariants-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later OR (GPL-2.0-or-later AND LGPL-3.0-or-later)))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11204
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GFDL and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd174
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd103
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1031
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1044
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND (FTL OR GPL-2.0-or-later) AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1173
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11272
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and CC0-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4220
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd44
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd256
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd990
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4217
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1170
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1014
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1011
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd28
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-or-later OR LGPL-3.0-or-later OR (GPL-2.0-or-later AND LGPL-3.0-or-later)) AND GFDL-1.3-invariants-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1143
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11269
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and CC0-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd420
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1146
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2.1+ and GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd193
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd982
type: simplelicensing_LicenseExpression
simplelicensing license expression: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd417
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11201
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GFDL and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd172
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1012
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5356
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11202
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1171
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd983
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd254
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1042
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd532
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd191
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1029
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1144
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4218
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd973
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11180
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11270
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd418
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4213
type: software_Package
supplied by: SPDXRef-gnrtd4218
software download location: NOASSERTION
summary: the user space library that developers compile ALSA applications against
software package version: 0:1.2.10-4.oe2403
software home page: https://alsa-project.org/
description: The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib
name: alsa-lib
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/alsa-lib@1.2.10-4.oe2403?arch=x86_64&epoch=0&upstream=alsa-lib-1.2.10-4.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd999
type: software_Package
supplied by: SPDXRef-gnrtd1042
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-3.oe2403?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd153
type: software_Package
supplied by: SPDXRef-gnrtd161
software download location: NOASSERTION
summary: Libraries for ncurses
software package version: 0:6.4-10.oe2403
software home page: https://invisible-island.net/ncurses/ncurses.html
description: Libraries for ncurses.
name: ncurses-libs
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/ncurses-libs@6.4-10.oe2403?arch=x86_64&epoch=0&upstream=ncurses-6.4-10.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd970
type: software_Package
supplied by: SPDXRef-gnrtd973
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libX11@1.8.7-3.oe2403?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1164
type: software_Package
supplied by: SPDXRef-gnrtd1171
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-3.oe2403
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-3.oe2403?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33
type: software_Package
supplied by: SPDXRef-gnrtd45
software download location: NOASSERTION
summary: Library for supporting access control list
software package version: 0:2.3.1-3.oe2403
software home page: https://savannah.nongnu.org/projects/acl
description: This package contains the library for manipulating access control list.
name: libacl
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libacl@2.3.1-3.oe2403?arch=x86_64&epoch=0&upstream=acl-2.3.1-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1004
type: software_Package
supplied by: SPDXRef-gnrtd1012
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd527
type: software_Package
supplied by: SPDXRef-gnrtd532
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.5-15.oe2403
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libxml2@2.11.5-15.oe2403?arch=x86_64&epoch=0&upstream=libxml2-2.11.5-15.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd409
type: software_Package
supplied by: SPDXRef-gnrtd418
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-35.oe2403
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-35.oe2403?arch=x86_64&epoch=0&upstream=systemd-255-35.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11176
type: software_Package
supplied by: SPDXRef-gnrtd11180
software download location: NOASSERTION
summary: X.Org X11 libXpm runtime library
software package version: 0:3.5.17-2.oe2403
software home page: https://www.x.org
description: X.Org X11 libXpm runtime library
name: libXpm
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libXpm@3.5.17-2.oe2403?arch=x86_64&epoch=0&upstream=libXpm-3.5.17-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11
type: software_Package
supplied by: SPDXRef-gnrtd191
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: software_Package
supplied by: SPDXRef-gnrtd254
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/sqlite@3.42.0-4.oe2403?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-4.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5353
type: software_Package
supplied by: SPDXRef-gnrtd5356
software download location: NOASSERTION
summary: A library and utilities for processing GIFs
software package version: 0:5.2.2-1.oe2403
software home page: http://www.sourceforge.net/projects/giflib/
description: giflib is a library of gif images and provides utilities for processing images.
name: giflib
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/giflib@5.2.2-1.oe2403?arch=x86_64&epoch=0&upstream=giflib-5.2.2-1.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25
type: software_Package
supplied by: SPDXRef-gnrtd29
software download location: NOASSERTION
summary: A GNU multiple precision arithmetic library
software package version: 1:6.3.0-3.oe2403
software home page: https://gmplib.org
description: GMP is a portable library written in C for arbitrary precision arithmetic on integers, rational numbers, and floating-point numbers. It aims to provide the fastest possible arithmetic for all applications that need higher precision than is directly supported by the basic C types.
name: gmp
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/gmp@6.3.0-3.oe2403?arch=x86_64&epoch=1&upstream=gmp-6.3.0-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd89
type: software_Package
supplied by: SPDXRef-gnrtd93
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1020
type: software_Package
supplied by: SPDXRef-gnrtd1029
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1002
type: software_Package
supplied by: SPDXRef-gnrtd1034
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-2.oe2403?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1128
type: software_Package
supplied by: SPDXRef-gnrtd1144
software download location: NOASSERTION
summary: The GNU Secure Communication Protocol Library
software package version: 0:3.8.2-11.oe2403
software home page: https://www.gnutls.org/
description: GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.
name: gnutls
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/gnutls@3.8.2-11.oe2403?arch=x86_64&epoch=0&upstream=gnutls-3.8.2-11.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11245
type: software_Package
supplied by: SPDXRef-gnrtd11270
software download location: NOASSERTION
summary: GNU Emacs text editor with LUCID toolkit X support
software package version: 1:29.1-3.oe2403
software home page: http://www.gnu.org/software/emacs
description: This package provides an emacs binary with support for X windows using LUCID toolkit.
name: emacs-lucid
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/emacs-lucid@29.1-3.oe2403?arch=x86_64&epoch=1&upstream=emacs-29.1-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23
type: software_Package
supplied by: SPDXRef-gnrtd172
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-17.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd986
type: software_Package
supplied by: SPDXRef-gnrtd991
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11196
type: software_Package
supplied by: SPDXRef-gnrtd11202
software download location: NOASSERTION
summary: Emacs common files
software package version: 1:29.1-3.oe2403
software home page: http://www.gnu.org/software/emacs
description: This package contains all the common files needed by emacs, emacs-lucid or emacs-nox.
name: emacs-common
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/emacs-common@29.1-3.oe2403?arch=x86_64&epoch=1&upstream=emacs-29.1-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd976
type: software_Package
supplied by: SPDXRef-gnrtd983
software download location: NOASSERTION
summary: TIFF Library and Utilities
software package version: 0:4.6.0-3.oe2403
software home page: https://libtiff.gitlab.io/libtiff/
description: This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
name: libtiff
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libtiff@4.6.0-3.oe2403?arch=x86_64&epoch=0&upstream=libtiff-4.6.0-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1