{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "PackageKit-gtk3-module-0.1.2.8-5.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-11T18:44:12.759365515Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/PackageKit-gtk3-module-0.1.2.8-5.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-PackageKit-gtk3-module-1.2.8",
      "name": "PackageKit-gtk3-module",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later AND FSFAP",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8032de2ce070e9266f7150ae7b389105bfe4e38d465a100452a2b861c7b32f71"
        }
      ],
      "description": "The PackageKit GTK3+ module allows any Pango application to install\nfonts from configured repositories using PackageKit.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/PackageKit-gtk3-module@1.2.8-5.oe2403sp1?arch=aarch64&epoch=0&upstream=PackageKit-1.2.8-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freedesktop.org/software/PackageKit/",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later AND FSFAP",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Install fonts automatically using PackageKit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.8-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-PackageKit-1.2.8",
      "name": "PackageKit",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later AND FSFAP",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "39e30b6e5afac315a5894a865eda0fdcbbd83c9d7748c6c537bc2c3e60dee676"
        }
      ],
      "description": "PackageKit is a D-Bus abstraction layer that allows the session user\nto manage packages in a secure way using a cross-distro,\ncross-architecture API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/PackageKit@1.2.8-5.oe2403sp1?arch=aarch64&epoch=0&upstream=PackageKit-1.2.8-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freedesktop.org/software/PackageKit/",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later AND FSFAP",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Package management service",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.8-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb49e7cc91649c7305d5e9db8b5ef1428d7b885b2cc06d981e354d42901307bf"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-PackageKit-gtk3-module-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-PackageKit-1.2.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-PackageKit-gtk3-module-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-PackageKit-gtk3-module-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    }
  ]
}