{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "varnish-0.7.4.3-2.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-18T18:33:26.758977035Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/varnish-0.7.4.3-2.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-varnish-7.4.3",
      "name": "varnish",
      "licenseConcluded": "BSD-2-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "918b50f710604051dc3213309251115e4cd6b072b42af4343d92dc62a9bdfecf"
        }
      ],
      "description": "This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy.\nYou install it in front of any server that speaks HTTP and configure it to cache the contents.\nVarnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,\ndepending on your architecture.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/varnish@7.4.3-2.oe2403sp1?arch=x86_64&epoch=0&upstream=varnish-7.4.3-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.varnish-cache.org/",
      "licenseDeclared": "BSD-2-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "A web application accelerator",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:7.4.3-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "60ec93c05e9eb1555cb60c985c5c99fd5ec8964d64a66cdd6922d565c9304f61"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gcc-12.3.1",
      "name": "gcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7c45407a93be3745e4c1511a25e105d68c5105e304f903b73c052e23f1717fee"
        }
      ],
      "description": "The gcc package contains the GNU Compiler Collection version 12.\nYou'll need this package in order to compile C code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Various compilers (C, C++, Objective-C, ...)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "406bf61a0c7f32534eb60e39c41da5c2c08e48c2e013fe970240acf8e8a07cf4"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-6.4",
      "name": "ncurses",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "54678dcf910449c1c104c70e47883c3840f4cc4d2f109d842e3c130b12be4ec0"
        }
      ],
      "description": "The ncurses (new curses) library is a free software emulation of\ncurses in System V Release 4.0 (SVr4), and more. It uses terminfo\nformat, supports pads and color and multiple highlights and forms\ncharacters and function-key mapping, and has all the other SVr4-curses\nenhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses@6.4-10.oe2403sp1?arch=x86_64&epoch=0&upstream=ncurses-6.4-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Terminal control library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "013124823f76705eade3c594f3a678eb3274865bb25e2f1f780eb2425d287f86"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-10.oe2403sp1?arch=x86_64&epoch=0&upstream=ncurses-6.4-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openEuler-rpm-config-30",
      "name": "openEuler-rpm-config",
      "licenseConcluded": "GPL+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5e0d314447b41755e3f8d5424de71f1427a4f0f383ae16cf68071bd66547a395"
        }
      ],
      "description": "specific rpm configuration files for openEuler.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openEuler-rpm-config@30-58.oe2403sp1?arch=x86_64&epoch=0&upstream=openEuler-rpm-config-30-58.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitee.com/openeuler/openEuler-rpm-config",
      "licenseDeclared": "GPL+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "specific rpm configuration files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:30-58.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-4.14.3",
      "name": "shadow",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "18a66f149bd8b375108f44157d469d23cb10f6841fb6b3da8ba88f967aaa271d"
        }
      ],
      "description": "This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow@4.14.3-8.oe2403sp1?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Tools for managing accounts and shadow password files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "licenseConcluded": "MIT and LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59addf4ce3547ea147d49567965e870dbbd126e495c23e73e4e7b6cd36483482"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-43.oe2403sp1?arch=x86_64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "MIT and LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openEuler-rpm-config-30"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-4.14.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-varnish-7.4.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    }
  ]
}