type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-08T18:23:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-08T18:23:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/aarch64-87fcd1b6-8025-4d08-9cb4-100d027b7a29-specv3/SPDXRef-gnrtd1021
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1022
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4879
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: libxslt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4955
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4956
from: webkit2gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1226
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1227
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4868
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4869
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd228
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd229
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1026
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48878
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd48879
from: yelp-xsl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd300
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4898
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4899
from: webkit2gtk3-jsc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd231
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd229
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1223
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1224
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4865
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4866
from: libsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4952
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4953
from: webkit2gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1123
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1124
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1150
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1151
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48889
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd48890
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1147
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1148
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd99
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd100
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1006
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1007
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd481
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd482
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1126
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1127
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4881
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd109
from: libxslt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd478
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd479
from: sqlite
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1024
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1025
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48881
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd48882
from: yelp-xsl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4895
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4896
from: webkit2gtk3-jsc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1009
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1010
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd97
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd298
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd109
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48886
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd48887
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd42
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd43
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48885
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gtk3
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48884
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48871
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48869
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48874
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48868
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sqlite
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48883
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48864
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48866
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48876
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: yelp-xsl
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48872
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: webkit2gtk3-jsc
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48873
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48875
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48867
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxslt
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48870
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: webkit2gtk3
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48865
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libsoup
from: yelp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd97
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1022
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4866
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1227
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48882
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later AND BSD-3-Clause AND GPL-2.0-or-later AND MIT)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1224
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd482
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48890
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND Apache-2.0 AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48887
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND Apache-2.0 AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd479
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48879
type: simplelicensing_LicenseExpression
simplelicensing license expression: (LGPL-2.0-or-later AND BSD-3-Clause AND GPL-2.0-or-later AND MIT)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd100
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1127
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4953
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4869
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1148
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1151
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4899
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1025
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4956
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd229
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1124
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd109
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1010
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd43
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4896
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1007
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48880
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1225
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd480
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd44
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd299
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4867
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4954
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4897
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1023
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48888
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd230
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1125
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd98
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1008
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4880
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1149
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4886
type: software_Package
supplied by: SPDXRef-gnrtd4897
software download location: NOASSERTION
summary: JavaScript engine from webkit2gtk3
software package version: 0:2.38.2-9.oe2403
software home page: https://www.webkitgtk.org/
description: This package contains JavaScript engine from webkit2gtk4.0.
name: webkit2gtk3-jsc
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd999
type: software_Package
supplied by: SPDXRef-gnrtd1008
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48863
type: software_Package
supplied by: SPDXRef-gnrtd48888
software download location: NOASSERTION
summary: Help browser for the GNOME desktop
software package version: 2:42.2-3.oe2403
software home page: https://wiki.gnome.org/Apps/Yelp
description: Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification. Yelp development has led to the development of various tools, and the Mallard and DocBook transformations live in standalone XSLT module. All of these are under the umbrella name Yelp.
name: yelp
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd473
type: software_Package
supplied by: SPDXRef-gnrtd480
software download location: NOASSERTION
summary: Embeded SQL database
software package version: 0:3.42.0-4.oe2403
software home page: http://www.sqlite.org/
description: SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.
name: sqlite
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1015
type: software_Package
supplied by: SPDXRef-gnrtd1023
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd226
type: software_Package
supplied by: SPDXRef-gnrtd230
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-1.oe2403
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software package url: pkg:rpm/xz-libs@5.4.7-1.oe2403?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4798
type: software_Package
supplied by: SPDXRef-gnrtd4954
software download location: NOASSERTION
summary: GTK web content engine library
software package version: 0:2.38.2-9.oe2403
software home page: https://www.webkitgtk.org/
description: WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2.
name: webkit2gtk3
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48877
type: software_Package
supplied by: SPDXRef-gnrtd48880
software download location: NOASSERTION
summary: XSL stylesheets for the yelp help browser
software package version: 0:42.1-2.oe2403
software home page: https://wiki.gnome.org/Apps/Yelp
description: This package contains XSL stylesheets that are used by the yelp help browser.
name: yelp-xsl
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4838
type: software_Package
supplied by: SPDXRef-gnrtd4867
software download location: NOASSERTION
summary: An HTTP library implementation
software package version: 0:2.74.3-10.oe2403
software home page: https://wiki.gnome.org/Projects/libsoup
description: libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.
name: libsoup
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1143
type: software_Package
supplied by: SPDXRef-gnrtd1149
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16
type: software_Package
supplied by: SPDXRef-gnrtd44
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: software_Package
supplied by: SPDXRef-gnrtd98
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1118
type: software_Package
supplied by: SPDXRef-gnrtd1125
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-3.oe2403
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd995
type: software_Package
supplied by: SPDXRef-gnrtd1027
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd294
type: software_Package
supplied by: SPDXRef-gnrtd299
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.5-15.oe2403
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1166
type: software_Package
supplied by: SPDXRef-gnrtd1225
software download location: NOASSERTION
summary: GTK+ graphical user interface library
software package version: 0:3.24.41-2.oe2403
software home page: https://www.gtk.org
description: GTK+ is an object-oriented widget toolkit written in the programming language C; it has a C-based object-oriented architecture that allows for maximum flexibility. The GTK+ library contains a set of graphical control elements (widgets)for creating graphical user interfaces. This package contains version 3 of GTK+.
name: gtk3
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4874
type: software_Package
supplied by: SPDXRef-gnrtd4880
software download location: NOASSERTION
summary: XSLT Transformation Library
software package version: 0:1.1.39-3.oe2403
software home page: https://gitlab.gnome.org/GNOME/libxslt
description: Libxslt is the XSLT C library developed for the GNOME project
name: libxslt
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0