{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sox-0.14.4.2.0-31.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-01T18:47:57.164566095Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/sox-0.14.4.2.0-31.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-sox-14.4.2.0",
      "name": "sox",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fd554322280ed8dd436c56a4c79a3f62bc634f67faef7387e47b45027bc8c8b8"
        }
      ],
      "description": "SoX is a cross-platform (Windows, Linux, MacOS X, etc.) command line utility\nthat can convert various formats of computer audio files in to other formats.\nIt can also apply various effects to these sound files, and, as an added\nbonus, SoX can play and record audio files on most platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sox@14.4.2.0-31.oe2403sp1?arch=aarch64&epoch=0&upstream=sox-14.4.2.0-31.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sox.sourceforge.net/",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "A general purpose sound file conversion tool",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:14.4.2.0-31.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-alsa-lib-1.2.10",
      "name": "alsa-lib",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0d7645420237c94706d1f96027372dbb665501dcce55be03c846aefb42ec2155"
        }
      ],
      "description": "The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/alsa-lib@1.2.10-4.oe2403sp1?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://alsa-project.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "the user space library that developers compile ALSA applications against",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.10-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgomp-12.3.1",
      "name": "libgomp",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5640a465e568dea65ff246441ace041db931986b1244d0036eb1df2178da2650"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\nfor OpenMP v4.5 support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgomp@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "GCC OpenMP v4.5 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "licenseConcluded": "Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "56bd06ee3f8264857af23becf978562238f1376bb0e360502ebc8d566dffd550"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=aarch64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "licenseDeclared": "Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsndfile-1.2.2",
      "name": "libsndfile",
      "licenseConcluded": "LGPL-2.1-or-later AND GPL-2.0-or-later AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5c0bb897bdbda7ed663e2527612aca6db7b7fb459d4c62a069ecef1322b6abd1"
        }
      ],
      "description": "Libsndfile is a C library for reading and writing files containing\nsampled sound such as MS Windows WAV and the Apple/SGI AIFF format\nthrough one standard library interface.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsndfile@1.2.2-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libsndfile-1.2.2-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libsndfile.github.io/libsndfile",
      "licenseDeclared": "LGPL-2.1-or-later AND GPL-2.0-or-later AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "Library for reading and writing sound files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.2-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/27175616bcfdcd3043efabc81dd49522eeafc71d5102c7877b737d6e80b97422-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-alsa-lib-1.2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgomp-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsndfile-1.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sox-14.4.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
