{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "rpm-ostree-0.2024.4-7.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-11T18:44:12.759365515Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/rpm-ostree-0.2024.4-7.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-rpm-ostree-2024.4",
      "name": "rpm-ostree",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ceea6768442cc0fb61393b43fedc15cd2a9ac08f05ee874dcc5bd191b1ad270b"
        }
      ],
      "description": "rpm-ostree is a hybrid image/package system.  It supports\n\"composing\" packages on a build server into an OSTree repository,\nwhich can then be replicated by client systems with atomic upgrades.\nAdditionally, unlike many \"pure\" image systems, with rpm-ostree\neach client system can layer on additional packages, providing\na \"best of both worlds\" approach.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-ostree@2024.4-7.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/coreos/rpm-ostree",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Hybrid image/package system",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2024.4-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb49e7cc91649c7305d5e9db8b5ef1428d7b885b2cc06d981e354d42901307bf"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-json-c-0.17",
      "name": "json-c",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0459abfd42251b7dcaf0cec1a9dd1dcb40934397f2dd257ef3f5015016f777c6"
        }
      ],
      "description": "JSON-C implements a reference counting object model that allows you\nto easily construct JSON objects in C, output them as JSON formatted\nstrings and parse JSON formatted strings back into the C representation\nof JSON objects.  It aims to conform to RFC 7159.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/json-c@0.17-7.oe2403sp1?arch=aarch64&epoch=0&upstream=json-c-0.17-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/json-c/json-c",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "JSON implementation in C",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.17-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libarchive-3.7.1",
      "name": "libarchive",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "90eda33b1f0c94929b3ea6b523e74dfa9f1f3616cad7b874368a1c4826a2204e"
        }
      ],
      "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libarchive@3.7.1-10.oe2403sp1?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.libarchive.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Multi-format archive and compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.7.1-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5132c056de1e06b3e6a37150fb54f67d7f1af6eee41e4034d014f79fdfcc263f"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libcap-2.69-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d4b40de71cdd22d946e0288a72c659bc36cff90e79c2fffe345a74ecc45cc83"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsolv-0.7.24",
      "name": "libsolv",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e5eba40e20af7c09795cb85c2314b7e47c62deb370ae571ea1bc66c23713f205"
        }
      ],
      "description": "A free package dependency solver using a satisfiability algorithm. The\nlibrary is based on two major, but independent, blocks:\n\n- Using a dictionary approach to store and retrieve package\n  and dependency information.\n\n- Using satisfiability, a well known and researched topic, for\n  resolving package dependencies.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsolv@0.7.24-5.oe2403sp1?arch=aarch64&epoch=0&upstream=libsolv-0.7.24-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/openSUSE/libsolv",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Package dependency solver",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.7.24-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0e2f2c36f2578b8b57214b6682051bc201ee1ed3ffd0efbf152de8b59775f50d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8ea7e06092fd40b1a4c5c778664a2d3c2dcbc1b544522742e9d1b5ac7e84fb9d"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-22.oe2403sp1?arch=aarch64&epoch=1&upstream=openssl-3.0.12-22.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-22.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-polkit-libs-123",
      "name": "polkit-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "930c428f3aaa5df8f55f12f01c3d243ac92a9008475e0969e1e7cf9bf923a8ea"
        }
      ],
      "description": "Libraries files for polkit.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/polkit-libs@123-2.oe2403sp1?arch=aarch64&epoch=0&upstream=polkit-123-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.freedesktop.org/wiki/Software/polkit",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Libraries for polkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:123-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-libs-4.18.2",
      "name": "rpm-libs",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2c95bfe05c76cb5a5e3b9adbac254008817b2a81bc528a696e6c290a1fb604e"
        }
      ],
      "description": "Shared library of rpm 4.18.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-libs@4.18.2-32.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Shared library of rpm 4.18",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-32.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-ostree-libs-2024.4",
      "name": "rpm-ostree-libs",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7781f4f27d7937dafaa9d9eeec1315b895380e9bdaec197ed9528c15b28e83cd"
        }
      ],
      "description": "The rpm-ostree-libs package includes the shared library for rpm-ostree.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-ostree-libs@2024.4-7.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-ostree-2024.4-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/coreos/rpm-ostree",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Shared library for rpm-ostree",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2024.4-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-skopeo-1.14.2",
      "name": "skopeo",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "86cebf7e0d9a754939f6ecf990fd4932822b0730b813e4dec0f854defb043707"
        }
      ],
      "description": "A command line utility that performs various operations on container images and image repositories",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/skopeo@1.14.2-6.oe2403sp1?arch=aarch64&epoch=1&upstream=skopeo-1.14.2-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/skopeo",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Work with remote images registries - retrieving information, images, signing content",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.14.2-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-sqlite-3.42.0",
      "name": "sqlite",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66cb80028f9f4cf140f68dcbecec5d67e43c891aefb8eacf416751910e731343"
        }
      ],
      "description": "SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sqlite@3.42.0-4.oe2403sp1?arch=aarch64&epoch=0&upstream=sqlite-3.42.0-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sqlite.org/",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Embeded SQL database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.42.0-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b37b4d0314d07f75aa0a4fff04b0392e6193b79855f0f8c68a6f28cdf0c8a863"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-43.oe2403sp1?arch=aarch64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-json-c-0.17"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsolv-0.7.24"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-polkit-libs-123"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-libs-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-ostree-libs-2024.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-skopeo-1.14.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sqlite-3.42.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-ostree-2024.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}