{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "libguestfs-1.1.49.5-6.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T18:48:22.843290112Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/libguestfs-1.1.49.5-6.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-libguestfs-1.49.5",
      "name": "libguestfs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "684535c44f9aa9dbaa0884a8ed651949d061c8198e969fd7b94d70b01df379be"
        }
      ],
      "description": "libguestfs is a set of tools for accessing and modifying virtual machine (VM) disk images.\nYou can use this for viewing and editing files inside guests, scripting changes to VMs,\nmonitoring disk used/free statistics, creating guests, P2V, V2V, performing backups, cloning VMs,\nbuilding VMs, formatting disks, resizing disks, and much more.\nlibguestfs can access almost any disk image imaginable. It can do it securely — without needing\nroot and with multiple layers of defence against rogue disk images. It can access disk images\non remote machines or on CDs/USB sticks. It can access proprietary systems like VMware and Hyper-V.\nAll this functionality is available through a scriptable shell called guestfish, or an interactive\nrescue shell virt-rescue.\nlibguestfs is a C library that can be linked with C and C++ management programs and has bindings for\nabout a dozen other programming languages. Using our FUSE module you can also mount guest filesystems\non the host.\nThe hivex subproject lets you merge changes into the Windows Registry in Windows guests. You can\nexamine unknown disk images to find out what they contain.\nlibguestfs has been in continuous development since 2009, with a 250 page manual, deployed in\nenterprise environments, and with many happy and successful users.\nDozens of projects are using libguestfs today.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libguestfs@1.49.5-6.oe2403sp1?arch=aarch64&epoch=1&upstream=libguestfs-1.49.5-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libguestfs.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A set of tools for accessing and modifying virtual machine (VM) disk images",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.49.5-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-acl-2.3.1",
      "name": "acl",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "541e54c446df2da2fd048b68b87bcb6b55918db659789b89eb858058bc5c6d58"
        }
      ],
      "description": "This package contains commands for manipulating POSIX access control lists,\nand the libacl.so dynamic library which contains the POSIX 1003.1e draft\nstandard 17 functions for manipulating access control lists.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/acl@2.3.1-7.oe2403sp1?arch=aarch64&epoch=0&upstream=acl-2.3.1-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Commands for manipulating POSIX access control lists",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-attr-2.5.1",
      "name": "attr",
      "licenseConcluded": "GPLv2+ AND LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f8812add2a48d037538c5d8596a12747edfd4b6db63d665b811e3e4c24cabde2"
        }
      ],
      "description": "A set of tools for manipulating extended attributes on filesystem\nobjects, in particular getfattr(1) and setfattr(1).\nAn attr(1) command is also provided which is largely compatible\nwith the SGI IRIX tool of the same name.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/attr@2.5.1-7.oe2403sp1?arch=aarch64&epoch=0&upstream=attr-2.5.1-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/attr",
      "licenseDeclared": "GPLv2+ AND LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Commands for Manipulating Filesystem Extended Attributes",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.1-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-augeas-1.14.1",
      "name": "augeas",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cd2bc86d79320a5e5581133d2f5b31904c0b8b02a4c21ef4ef508b4d2d981fe0"
        }
      ],
      "description": "Augeas is a configuration editing tool. It parses configuration files in their native\nformats and transforms them into a tree. Configuration changes are made by manipulating\nthis tree and saving it back into native config files.\n\nAugeas is:\n     An API provided by a C library\n     A command line tool to manipulate configuration from the shell (and shell scripts)\n     Language bindings to do the same from your favorite scripting language\n     Canonical tree representations of common configuration files\n     A domain-specific language to describe configuration file formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/augeas@1.14.1-2.oe2403sp1?arch=aarch64&epoch=0&upstream=augeas-1.14.1-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://augeas.net/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Augeas is a configuration editing tool for changing configuration files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.14.1-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-binutils-2.41",
      "name": "binutils",
      "licenseConcluded": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02894411d5c3f0a6c4cace7e37b7143fc4d70aae45ff52c3f7ed829b620dcab2"
        }
      ],
      "description": "Binutils is a collection of binary utilities, including ar (for\ncreating, modifying and extracting from archives), as (a family of GNU\nassemblers), gprof (for displaying call graph profile data), ld (the\nGNU linker), nm (for listing symbols from object files), objcopy (for\ncopying and translating object files), objdump (for displaying\ninformation from object files), ranlib (for generating an index for\nthe contents of an archive), readelf (for displaying detailed\ninformation about binary files), size (for listing the section sizes\nof an object or archive file), strings (for listing printable strings\nfrom files), strip (for discarding symbols), and addr2line (for\nconverting addresses to file and line).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/binutils@2.41-14.oe2403sp1?arch=aarch64&epoch=0&upstream=binutils-2.41-14.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sourceware.org/binutils",
      "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A GNU collection of binary utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.41-14.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-bison-3.8.2",
      "name": "bison",
      "licenseConcluded": "GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-3.0 AND GPL-3.0-or-later WITH Bison-exception-2.2 AND GPL-2.0-or-later AND GPL-2.0-or-later WITH Autoconf-exception-2.0 AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND FSFULLR AND GFDL-1.3-or-later AND X11",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5acd94ff1f17e711aeff2a407bc92f4c61663b8f0a6f79fa2082e5ed63930f07"
        }
      ],
      "description": "Bison is a general-purpose parser generator that converts an\nannotated context-free grammar into a deterministic LR or\ngeneralized LR (GLR) parser employing LALR(1) parser tables.\nAs an experimental feature, Bison can also generate IELR(1)\nor canonical LR(1) parser tables. Once you are proficient with\nBison, you can use it to develop a wide range of language\nparsers, from those used in simple desk calculators to complex\nprogramming languages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bison@3.8.2-6.oe2403sp1?arch=aarch64&epoch=0&upstream=bison-3.8.2-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bison/",
      "licenseDeclared": "GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-3.0 AND GPL-3.0-or-later WITH Bison-exception-2.2 AND GPL-2.0-or-later AND GPL-2.0-or-later WITH Autoconf-exception-2.0 AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND FSFULLR AND GFDL-1.3-or-later AND X11",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A GNU general-purpose parser generator",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-bzip2-1.0.8",
      "name": "bzip2",
      "licenseConcluded": "BSD-4-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8daabe22fd0b4ec6fe0a07291e619966d596aea07721d91649263bb750ca0ddc"
        }
      ],
      "description": "bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bzip2@1.0.8-9.oe2403sp1?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.sourceware.org/bzip2/",
      "licenseDeclared": "BSD-4-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A high-quality data compressor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.8-9.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-curl-8.4.0",
      "name": "curl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b49d3784847ab4777e0e5acff9f80d98b2e86e43240da6ccc24a518eb1eda3e5"
        }
      ],
      "description": "cURL is a computer software project providing a library (libcurl) and\ncommand-line tool (curl) for transferring data using various protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/curl@8.4.0-14.oe2403sp1?arch=aarch64&epoch=0&upstream=curl-8.4.0-14.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Curl is used in command lines or scripts to transfer data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-14.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-dhcp-4.4.3",
      "name": "dhcp",
      "licenseConcluded": "ISC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5e166be87a45f486acd97daf2601d0a3cf2212b66e4049c6c8048335961d1608"
        }
      ],
      "description": "The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dhcp@4.4.3-10.oe2403sp1?arch=aarch64&epoch=12&upstream=dhcp-4.4.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.isc.org/dhcp/",
      "licenseDeclared": "ISC",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Dynamic host configuration protocol software",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "12:4.4.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gawk-5.2.2",
      "name": "gawk",
      "licenseConcluded": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6e7dd75d95c9923a537464ecbed269d7db0c8a5eb9f276ef0032501df0b2a7a4"
        }
      ],
      "description": "The gawk package is the GNU implementation of awk.\nThe awk utility interprets a special-purpose programming language that\nmakes it possible to handle simple data-reformatting jobs with just a\nfew lines of code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gawk@5.2.2-3.oe2403sp1?arch=aarch64&epoch=0&upstream=gawk-5.2.2-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/gawk/",
      "licenseDeclared": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The GNU version of the AWK text processing utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.2-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdb-headless-14.1",
      "name": "gdb-headless",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "be4f4f471a5cd9b6c377bec79aa2e59b85bc1b6171052f714a82ed9e785b768c"
        }
      ],
      "description": "GDB, the GNU Project debugger, allows you to see what is going on inside\nanother program while it executes -- or what another program was doing\nat the moment it crashed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdb-headless@14.1-11.oe2403sp1?arch=aarch64&epoch=0&upstream=gdb-14.1-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://gnu.org/software/gdb/",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The GNU Project debugger for C, C++, Fortran, Go and other languages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:14.1-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb49e7cc91649c7305d5e9db8b5ef1428d7b885b2cc06d981e354d42901307bf"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnupg2-2.4.3",
      "name": "gnupg2",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d5794d69e89e32bed8927312563717092654be14ea48074740b0c8f61ebeb4c6"
        }
      ],
      "description": "GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP).  GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnupg2@2.4.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=gnupg2-2.4.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gnupg.org/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Utility for secure communication and data storage",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "licenseConcluded": "LGPLv2.1+ and GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f886bf3a35a87e5772ebd544fd3c8c7057e239ca9f989bde988ad63df3766167"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-11.oe2403sp1?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "licenseDeclared": "LGPLv2.1+ and GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gzip-1.12",
      "name": "gzip",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c06bdee4e5353623aea48a053d91c1879f9cd0f5d28ed3cad662992d48c91148"
        }
      ],
      "description": "gzip is a single-file/stream lossless data compression\nutility, where the resulting compressed file generally\nhas the suffix .gz.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gzip@1.12-6.oe2403sp1?arch=aarch64&epoch=0&upstream=gzip-1.12-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/gzip",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A data compression utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.12-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-iproute-6.6.0",
      "name": "iproute",
      "licenseConcluded": "GPLv2+ and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "68f19ee1dd66cc50403a10e8f8c9434c9fe65605ece01b4c5a043f7abe1e91e3"
        }
      ],
      "description": "Iproute2 is a collection of user-space utilities to set up networking\nunder Linux from the command-line. It can inspect and configure,\namong other things: interface paramters, IP addresses, routing,\ntunnels, bridges, packet transformations (IPsec, etc.), and Quality\nof Service.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/iproute@6.6.0-4.oe2403sp1?arch=aarch64&epoch=1&upstream=iproute-6.6.0-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://kernel.org/pub/linux/utils/net/iproute2/",
      "licenseDeclared": "GPLv2+ and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Linux network configuration utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:6.6.0-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-iputils-20221126",
      "name": "iputils",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f9fa73318260ffa18b012c680d414e631669deded017132adc5cb3d965ed7d3f"
        }
      ],
      "description": "The iputils package contains basic utilities for monitoring a network,\nincluding ping. The ping command sends a series of ICMP protocol\nECHO_REQUEST packets to a specified network host to discover whether\nthe target machine is alive and receiving network traffic.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/iputils@20221126-6.oe2403sp1?arch=aarch64&epoch=0&upstream=iputils-20221126-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/iputils/iputils",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Network monitoring tools including ping",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20221126-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-kpartx-0.9.5",
      "name": "kpartx",
      "licenseConcluded": "GPL-2.0-or-later and LGPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bbafc5611554b54e3b38d8246eaf74a18c8523e589fe55e6683be5ec3ad5bdfa"
        }
      ],
      "description": "Reads partition tables and create device maps over partitions segments detected.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/kpartx@0.9.5-18.oe2403sp1?arch=aarch64&epoch=0&upstream=multipath-tools-0.9.5-18.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://christophe.varoqui.free.fr/",
      "licenseDeclared": "GPL-2.0-or-later and LGPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Create device maps from partition tables.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.5-18.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "20347f2c5e25fb6a8246c6a7deceb2960ccf705d9176b3d27ed5c2d89c54b955"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-7.oe2403sp1?arch=aarch64&epoch=0&upstream=acl-2.3.1-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5132c056de1e06b3e6a37150fb54f67d7f1af6eee41e4034d014f79fdfcc263f"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libcap-2.69-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libidn-1.41",
      "name": "libidn",
      "licenseConcluded": "LGPLv2+ and GPLv3+ and GFDL-1.3-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "054326d96250f3a3c756f83c6501d25b8ca48df6a1aa7b1a03dc6e7ed45ff0d0"
        }
      ],
      "description": "GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications.\nLibidn's purpose is to encode and decode internationalized domain names.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libidn@1.41-2.oe2403sp1?arch=aarch64&epoch=0&upstream=libidn-1.41-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/libidn/",
      "licenseDeclared": "LGPLv2+ and GPLv3+ and GFDL-1.3-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "GNU IDN Library - Libidn",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.41-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libtasn1-4.19.0",
      "name": "libtasn1",
      "licenseConcluded": "GPLv3+ and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c7dcf6f81e0716ba884b49f1d40b2bcc8a757933e46ae33b2754ee1e196f664e"
        }
      ],
      "description": "Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.\nThe goal of this implementation is to be highly portable, and only require an\nANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1,\nas specified by the X.680 ITU-T recommendation) parsing and structures management,\nand Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libtasn1@4.19.0-2.oe2403sp1?arch=aarch64&epoch=0&upstream=libtasn1-4.19.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/libtasn1/",
      "licenseDeclared": "GPLv3+ and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Libtasn1 is a ASN.1 parsing library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.19.0-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libvirt-9.10.0",
      "name": "libvirt",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5f26afbfe3545ab8a15a704c2335013a5fc18ee664e09b5ba758c9ac9af08756"
        }
      ],
      "description": "Libvirt is a C toolkit to interact with the virtualization capabilities\nof recent versions of Linux (and other OSes). The main package includes\nthe libvirtd server exporting the virtualization support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libvirt@9.10.0-20.oe2403sp1?arch=aarch64&epoch=0&upstream=libvirt-9.10.0-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libvirt.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Library providing a simple virtualization API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.10.0-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libvirt-daemon-kvm-9.10.0",
      "name": "libvirt-daemon-kvm",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3ab5e04c2a5e730068546fffd697ee037946c09a6a141a15f61f27d1f678c5be"
        }
      ],
      "description": "Server side daemon and driver required to manage the virtualization\ncapabilities of the KVM hypervisor",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libvirt-daemon-kvm@9.10.0-20.oe2403sp1?arch=aarch64&epoch=0&upstream=libvirt-9.10.0-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libvirt.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Server side daemon & driver required to run KVM guests",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.10.0-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libvirt-libs-9.10.0",
      "name": "libvirt-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f851d7ae5e550f919ce36ff103f4639554518e125e85d422de3ca96f3fe9281c"
        }
      ],
      "description": "Shared libraries for accessing the libvirt daemon.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libvirt-libs@9.10.0-20.oe2403sp1?arch=aarch64&epoch=0&upstream=libvirt-9.10.0-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libvirt.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Client side libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.10.0-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.9",
      "name": "libxml2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bc905332a1519fdf8bcd6014bec5b9abd856659452a84972c36a4aa1cf48485f"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.9-12.oe2403sp1?arch=aarch64&epoch=0&upstream=libxml2-2.11.9-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.9-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ba403831e1a55586e8751b229037f3d072f214e4dbc8b717981beb9b8bd74f84"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-10.oe2403sp1?arch=aarch64&epoch=0&upstream=ncurses-6.4-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-nilfs-utils-2.2.9",
      "name": "nilfs-utils",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cc85508b399811c9daa54c8ca24f5f568f4ab13838e8a1c76fe6ec9647766762"
        }
      ],
      "description": "Userspace utilities for creating and mounting NILFS v2 filesystems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nilfs-utils@2.2.9-2.oe2403sp1?arch=aarch64&epoch=0&upstream=nilfs-utils-2.2.9-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://nilfs.sourceforge.net",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Utilities for managing NILFS v2 filesystems",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.9-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ntfs-3g-2022.10.3",
      "name": "ntfs-3g",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3fef221303d29625190e857e64a3955c996623ac20794524fcce32879c12698f"
        }
      ],
      "description": "NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems.\nIt provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and\nWindows 7 NTFS file systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ntfs-3g@2022.10.3-3.oe2403sp1?arch=aarch64&epoch=2&upstream=ntfs-3g-2022.10.3-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.ntfs-3g.org/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Linux NTFS userspace driver",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:2022.10.3-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssh-clients-9.6p1",
      "name": "openssh-clients",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bb0149fa7ab57e56084fead599651545727cef98c8cbd7a624b8caca4906a0db"
        }
      ],
      "description": "OpenSSH is a free version of SSH (Secure SHell), a program for logging\ninto and executing commands on a remote machine. This package includes\nthe clients necessary to make encrypted connections to SSH servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssh-clients@9.6p1-13.oe2403sp1?arch=aarch64&epoch=0&upstream=openssh-9.6p1-13.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.openssh.com/portable.html",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "An open source SSH client applications",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.6p1-13.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-pacemaker-2.1.7",
      "name": "pacemaker",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9dae24e197f712d3ec267afeaf7e2a5c928a4adf801caa4162f4cabd310657b9"
        }
      ],
      "description": "Pacemaker is an advanced, scalable High-Availability cluster resource\nmanager.\n\nIt supports more than 16 node clusters with significant capabilities\nfor managing resources and dependencies.\n\nIt will run scripts at initialization, when machines go up or down,\nwhen related resources fail and can be configured to periodically check\nresource health.\n\nAvailable rpmbuild rebuild options:\n  --with(out) : cibsecrets hardening nls pre_release profiling stonithd",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pacemaker@2.1.7-12.oe2403sp1?arch=aarch64&epoch=0&upstream=pacemaker-2.1.7-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.clusterlabs.org/",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Scalable High-Availability cluster resource manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.7-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-procps-ng-4.0.4",
      "name": "procps-ng",
      "licenseConcluded": "GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2dc3494eebc33e1e056200109ec5824f94f2238d5ebf7b9e85e7cf6e25622b34"
        }
      ],
      "description": "The procps package contains a set of system utilities that provide\nsystem information. Procps includes ps, free, skill, pkill, pgrep,\nsnice, tload, top, uptime, vmstat, pidof, pmap, slabtop, w, watch\nand pwdx.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/procps-ng@4.0.4-7.oe2403sp1?arch=aarch64&epoch=0&upstream=procps-ng-4.0.4-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sourceforge.net/projects/procps-ng/",
      "licenseDeclared": "GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Utilities that provide system information.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.0.4-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-img-8.2.0",
      "name": "qemu-img",
      "licenseConcluded": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8d3fa8456521d8a5c91508dae32885c07bb113fa869599999cbc568b86128951"
        }
      ],
      "description": "This package provides a command line tool for manipulating disk images",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-img@8.2.0-35.oe2403sp1?arch=aarch64&epoch=11&upstream=qemu-8.2.0-35.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "licenseDeclared": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "QEMU command line tool for manipulating disk images",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-35.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-readline-8.2",
      "name": "readline",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4bf0041d231f5cb1e1c596320bd845952476281fa84d54a532a16072211431e1"
        }
      ],
      "description": "The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/readline@8.2-5.oe2403sp1?arch=aarch64&epoch=0&upstream=readline-8.2-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tiswww.case.edu/php/chet/readline/rltop.html",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Readline library for editing typed command lines",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.2-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-libs-4.18.2",
      "name": "rpm-libs",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2c95bfe05c76cb5a5e3b9adbac254008817b2a81bc528a696e6c290a1fb604e"
        }
      ],
      "description": "Shared library of rpm 4.18.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-libs@4.18.2-32.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Shared library of rpm 4.18",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-32.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rsync-3.2.7",
      "name": "rsync",
      "licenseConcluded": "GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db40c47c0b03977f2c39e164f3c43447774c1ad9072fb0278575c51350229e03"
        }
      ],
      "description": "Rsync is an open source utility that provides fast incremental file transfer.\nIt uses the \"rsync algorithm\" which provides a very fast method for bringing\nremote files into sync. It does this by sending just the differences in the\nfiles across the link, without requiring that both sets of files are present\nat one of the ends of the link beforehand.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rsync@3.2.7-10.oe2403sp1?arch=aarch64&epoch=0&upstream=rsync-3.2.7-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://rsync.samba.org/",
      "licenseDeclared": "GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Fast incremental file transfer utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.7-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-sed-4.9",
      "name": "sed",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e208a08990bf239789dc324282fd91d26a0cac9d05779c250974b3caa83e668d"
        }
      ],
      "description": "Sed is a non-interactive command-line text editor. A stream editor is used\nto per-form basic text transformations on an input stream (a file or input\nfrom a pipeline).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sed@4.9-5.oe2403sp1?arch=aarch64&epoch=0&upstream=sed-4.9-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/sed/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "non-interactive command-line text editor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.9-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-selinux-policy-40.7",
      "name": "selinux-policy",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cdd5c5e2544ef52db65d55a54dee40ea63f382c96c180db53fa80a435389f001"
        }
      ],
      "description": "SELinux Base package for SELinux Reference Policy - modular.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/selinux-policy@40.7-5.oe2403sp1?arch=noarch&epoch=0&upstream=selinux-policy-40.7-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-selinux/selinux-policy/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "SELinux policy configuration",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:40.7-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-sleuthkit-4.12.1",
      "name": "sleuthkit",
      "licenseConcluded": "CPL-1.0 and IPL-1.0 and GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bef3c289e43b06a9fc1665fb3c87559bf388139c31c1f6b1129976208aefe02f"
        }
      ],
      "description": "The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command\nline file system forensic tools that allow an investigator to examine NTFS,\nFAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a\nnon-intrusive fashion. The  tools have a layer-based design and can extract\ndata from internal file system structures. Because the tools do not rely on the\noperating system to process the file systems, deleted and hidden content is\nshown.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sleuthkit@4.12.1-3.oe2403sp1?arch=aarch64&epoch=0&upstream=sleuthkit-4.12.1-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sleuthkit.org",
      "licenseDeclared": "CPL-1.0 and IPL-1.0 and GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Tools for file system and volume forensic analysis",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.12.1-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-strace-6.6",
      "name": "strace",
      "licenseConcluded": "LGPL-2.1+ and GPL-2.0+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "797cb5a01965ddd7858420ce33061c8d3fa06d9c9cebee019324589fb4860ddd"
        }
      ],
      "description": "The strace program intercepts and records the system calls called and\nreceived by a running process.  Strace can print a record of each\nsystem call, its arguments and its return value.  Strace is useful for\ndiagnosing problems and debugging, as well as for instructional\npurposes.\n\nInstall strace if you need a tool to track the system calls made and\nreceived by a process.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/strace@6.6-3.oe2403sp1?arch=aarch64&epoch=0&upstream=strace-6.6-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://strace.io",
      "licenseDeclared": "LGPL-2.1+ and GPL-2.0+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Tracks and displays system calls associated with a running process",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.6-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "licenseConcluded": "MIT and LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eb892768f80cdffaed37a7b54dcd426592de594682563aedf098708472ccd607"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-43.oe2403sp1?arch=aarch64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "MIT and LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b37b4d0314d07f75aa0a4fff04b0392e6193b79855f0f8c68a6f28cdf0c8a863"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-43.oe2403sp1?arch=aarch64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-udev-255",
      "name": "systemd-udev",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4c6450df8f2612dd7351e87538c2007dc53ea948180395ba86da60c5ac202a36"
        }
      ],
      "description": "This package contains systemd-udev and the rules and hardware database\nneeded to manage device nodes. This package is necessary on physical\nmachines and in virtual machines, but not in containers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-udev@255-43.oe2403sp1?arch=aarch64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Rule-based device node and kernel event manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-tar-1.35",
      "name": "tar",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a807d3c4d2f0d8c212030ef92aa07c4d7fcce494e5106ee2fe94aa9d2e81a8d1"
        }
      ],
      "description": "GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tar@1.35-3.oe2403sp1?arch=aarch64&epoch=2&upstream=tar-1.35-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/tar/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "An organized and systematic method of controlling a large amount of data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.35-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-util-linux-2.39.1",
      "name": "util-linux",
      "licenseConcluded": "GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ec64f02ecc9d4ab69146e0c332f63e77a5247a44d1e4bf58e7b0d89b52222352"
        }
      ],
      "description": "The util-linux package contains a random collection of files that\nimplements some low-level basic linux utilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/util-linux@2.39.1-22.oe2403sp1?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-22.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
      "licenseDeclared": "GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A random collection of Linux utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.39.1-22.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-vim-minimal-9.0.2092",
      "name": "vim-minimal",
      "licenseConcluded": "Vim and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "47609cec24b46961b7508a1fdbd7d275a6726499483e8323fe58270138530f7a"
        }
      ],
      "description": "The minimal package provides a minimal version of vim editor. It will be installed as /usr/bin/vi.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/vim-minimal@9.0.2092-16.oe2403sp1?arch=aarch64&epoch=2&upstream=vim-9.0.2092-16.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.vim.org",
      "licenseDeclared": "Vim and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "This package provides the basic and minimal functionalities of vim editor.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:9.0.2092-16.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-wget-1.21.4",
      "name": "wget",
      "licenseConcluded": "GPL-3.0-or-later AND LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d61ee76d142743692a4ae212eb92cf1306f7238740c307a709febb742b78159d"
        }
      ],
      "description": "GNU Wget is a free software package for retrieving files using HTTP, HTTPS,\nFTP and FTPS the most widely-used Internet protocols. It is a non-interactive\ncommandline tool, so it may easily be called from scripts, cron jobs, terminals\nwithout X-Windows support, etc.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/wget@1.21.4-4.oe2403sp1?arch=aarch64&epoch=0&upstream=wget-1.21.4-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/wget/",
      "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.4-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-5.4.7",
      "name": "xz",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c98da257c659bb220825efea68e02b57a6861716f7edf6df7524c9f8cf353ac9"
        }
      ],
      "description": "XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz@5.4.7-5.oe2403sp1?arch=aarch64&epoch=0&upstream=xz-5.4.7-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A free general-purpose data compreession software with LZMA2 algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-yajl-2.1.0",
      "name": "yajl",
      "licenseConcluded": "ISC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d8ab0388c1f98f879cb0ca381ac4d20e2099b9bc30245c5bd7bc336f935931b"
        }
      ],
      "description": "yajl is a small event-driven JSON parser written in ANSI C, and a small\nvalidating JSON generator.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/yajl@2.1.0-21.oe2403sp1?arch=aarch64&epoch=0&upstream=yajl-2.1.0-21.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/lloyd/yajl",
      "licenseDeclared": "ISC",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Yet Another JSON Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.0-21.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-acl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-attr-2.5.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-augeas-1.14.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-binutils-2.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bison-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bzip2-1.0.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-curl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dhcp-4.4.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gawk-5.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdb-headless-14.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnupg2-2.4.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gzip-1.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-iproute-6.6.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-iputils-20221126"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-kpartx-0.9.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libidn-1.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libtasn1-4.19.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libvirt-9.10.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libvirt-daemon-kvm-9.10.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libvirt-libs-9.10.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nilfs-utils-2.2.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ntfs-3g-2022.10.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssh-clients-9.6p1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pacemaker-2.1.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-procps-ng-4.0.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-img-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-readline-8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-libs-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rsync-3.2.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sed-4.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-selinux-policy-40.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sleuthkit-4.12.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-strace-6.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-udev-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tar-1.35"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-util-linux-2.39.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-vim-minimal-9.0.2092"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-wget-1.21.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libguestfs-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-yajl-2.1.0"
    }
  ]
}
