{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "containerd-0.1.6.22-16.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-11T18:44:12.759365515Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/containerd-0.1.6.22-16.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-containerd-1.6.22",
      "name": "containerd",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c2a0e830dae740553439a1df3ceca64a6926239ac9eddb134f6cb5c08da2ec2a"
        }
      ],
      "description": "containerd is an industry-standard container runtime with an emphasis on\nsimplicity, robustness and portability.  It is available as a daemon for Linux\nand Windows, which can manage the complete container lifecycle of its host\nsystem: image transfer and storage, container execution and supervision,\nlow-level storage and network attachments, etc.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/containerd@1.6.22-16.oe2403sp1?arch=aarch64&epoch=0&upstream=containerd-1.6.22-16.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://containerd.io",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "An industry-standard container runtime",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.6.22-16.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-runc-1.1.8",
      "name": "runc",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37e55b0710151da320dbccb35e43d14e7c26b51b744ca672520087b1de294abe"
        }
      ],
      "description": "runc is a CLI tool for spawning and running containers according to the OCI specification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/runc@1.1.8-27.oe2403sp1?arch=aarch64&epoch=0&upstream=runc-1.1.8-27.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.opencontainers.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "runc is a CLI tool for spawning and running containers according to the OCI specification.",
      "supplier": "Organization: OCI",
      "versionInfo": "0:1.1.8-27.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-containerd-1.6.22",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-containerd-1.6.22",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-containerd-1.6.22",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-runc-1.1.8"
    }
  ]
}