{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qt6-qtwebengine-0.6.5.2-7.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T18:48:22.843290112Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qt6-qtwebengine-0.6.5.2-7.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "name": "qt6-qtwebengine",
      "licenseConcluded": "BSD-3-Clause and GPL-3.0-only and LGPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3a027d7a5f01c5bbbade520ce6206dd0f60bf8b52fbd74455c250b9311bc8a5b"
        }
      ],
      "description": "Qt6 - QtWebEngine components.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt6-qtwebengine@6.5.2-7.oe2403sp1?arch=aarch64&epoch=0&upstream=qt6-qtwebengine-6.5.2-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "BSD-3-Clause and GPL-3.0-only and LGPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Qt6 - QtWebEngine components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.5.2-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-alsa-lib-1.2.10",
      "name": "alsa-lib",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0d7645420237c94706d1f96027372dbb665501dcce55be03c846aefb42ec2155"
        }
      ],
      "description": "The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/alsa-lib@1.2.10-4.oe2403sp1?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://alsa-project.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "the user space library that developers compile ALSA applications against",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.10-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-expat-2.5.0",
      "name": "expat",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7b838883c6b1297bffe185a3590bcb5bc0bb68ef8f3f8bf284dc658882f1d00d"
        }
      ],
      "description": "expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/expat@2.5.0-11.oe2403sp1?arch=aarch64&epoch=0&upstream=expat-2.5.0-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libexpat.github.io/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "An XML parser library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ffmpeg-libs-6.1.1",
      "name": "ffmpeg-libs",
      "licenseConcluded": "GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "466b5b6c891b36d43e52dcc5a7001706c03154d22265dc52f7a7ba712dc58968"
        }
      ],
      "description": "FFmpeg is a complete and free Internet live audio and video\nbroadcasting solution for Linux/Unix. It also includes a digital\nVCR. It can encode in real time in many formats including MPEG1 audio\nand video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\nThis package contains the libraries for ffmpeg",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ffmpeg-libs@6.1.1-20.oe2403sp1?arch=aarch64&epoch=0&upstream=ffmpeg-6.1.1-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://ffmpeg.org/",
      "licenseDeclared": "GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Libraries for ffmpeg",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.1.1-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-freetype-2.13.2",
      "name": "freetype",
      "licenseConcluded": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2d85f92bcc31e49a24ec36f9af7cd8b4a8fc6e5513a2d80270cc692168f6b90"
        }
      ],
      "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freetype@2.13.2-3.oe2403sp1?arch=aarch64&epoch=0&upstream=freetype-2.13.2-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freetype.org",
      "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "FreeType is a freely available software library to render fonts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.13.2-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb49e7cc91649c7305d5e9db8b5ef1428d7b885b2cc06d981e354d42901307bf"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "076cc7d311543740547d1df4ec8dc57e153f48b53e496e99878376af3dc75c4a"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-2.oe2403sp1?arch=aarch64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-lcms2-2.16",
      "name": "lcms2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd80a371926f9bc1f509f64f18d7436bafb8cd72e53265881eceda04f321b776"
        }
      ],
      "description": "LittleCMS intends to be an OPEN SOURSE small-footprint color management\nengine,with special focus on accuracy and performence.It uses the\nInternational Color Consortium standard (ICC), which is the modern\nstandard when regarding to color management. The ICC specification\nis widely used and is referred to in many International and other\nde-facto standards.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lcms2@2.16-2.oe2403sp1?arch=aarch64&epoch=0&upstream=lcms2-2.16-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.littlecms.com",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Color Management Engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.16-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7aa4962194b45d3db0144cc64e50008cffe60f912cf9dd54ddb34109fbc65255"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp1?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libevent-2.1.12",
      "name": "libevent",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "36153c84a8d28bbd04481e7a65b931efb965fc039e05cb5803e9f0549fec492a"
        }
      ],
      "description": "Libevent additionally provides a sophisticated framework for buffered network IO, with support for sockets,\nfilters, rate-limiting, SSL, zero-copy file transmission, and IOCP.\nLibevent includes support for several useful protocols, including DNS, HTTP, and a minimal RPC framewor.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libevent@2.1.12-17.oe2403sp1?arch=aarch64&epoch=0&upstream=libevent-2.1.12-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libevent.org/",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "An event notification library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.12-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d4b40de71cdd22d946e0288a72c659bc36cff90e79c2fffe345a74ecc45cc83"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libicu-74.1",
      "name": "libicu",
      "licenseConcluded": "MIT and UCD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "586c0b4b506ecdf44e2789af7050152e4c37a5abb8c6cecedb8d34d52ebc7ec9"
        }
      ],
      "description": "libs package for icu\ne",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libicu@74.1-4.oe2403sp1?arch=aarch64&epoch=0&upstream=icu-74.1-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://site.icu-project.org/",
      "licenseDeclared": "MIT and UCD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "libs package for icu",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:74.1-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "licenseConcluded": "Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "56bd06ee3f8264857af23becf978562238f1376bb0e360502ebc8d566dffd550"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=aarch64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "licenseDeclared": "Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0e2f2c36f2578b8b57214b6682051bc201ee1ed3ffd0efbf152de8b59775f50d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libvpx-1.13.1",
      "name": "libvpx",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9f6ae2e1c90747deb9c51f06a32f7b6a8d3fd614a45087271da87e6fd453593b"
        }
      ],
      "description": "libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications\nwith the VP8 and VP9 video codecs, high quality, royalty free, open source codecs\ndeployed on millions of computers and devices worldwide.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libvpx@1.13.1-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libvpx-1.13.1-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.webmproject.org/code/",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "VP8/VP9 Video Codec SDK",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.13.1-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxkbfile-1.1.2",
      "name": "libxkbfile",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4747131a0dffe59b855c52fcd57bbafed5fa64a99c0ab33a23695291e9a95372"
        }
      ],
      "description": "Libxkbfile is used by the X servers and utilities to parse the XKB\nconfiguration data files.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxkbfile@1.1.2-2.oe2403sp1?arch=aarch64&epoch=0&upstream=libxkbfile-1.1.2-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "X11 keyboard file manipulation library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.2-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-mesa-libgbm-24.0.3",
      "name": "mesa-libgbm",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f88e6f26949d4af5fa79ec5ba69fe66e61b7e0300b59f629485c1f0e42b9f638"
        }
      ],
      "description": "Mesa gbm runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mesa-libgbm@24.0.3-5.oe2403sp1?arch=aarch64&epoch=0&upstream=mesa-24.0.3-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.mesa3d.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Mesa gbm runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:24.0.3-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-pipewire-libs-0.3.63",
      "name": "pipewire-libs",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3a9daf428cf556ddca9783c8bd2db51485eaa6f961f185c5b6998a901f9633f8"
        }
      ],
      "description": "This package contains the runtime libraries for any application that wishes\nto interface with a PipeWire media server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pipewire-libs@0.3.63-6.oe2403sp1?arch=aarch64&epoch=0&upstream=pipewire-0.3.63-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pipewire.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Libraries for PipeWire clients",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.3.63-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt6-qtbase-6.5.2",
      "name": "qt6-qtbase",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d96881d5a3960977e71f574d2840e4645188728be99983d7e8744b3cea138137"
        }
      ],
      "description": "Qt is a software toolkit for developing applications.\n\nThis package contains base tools, like string, xml, and network\nhandling.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt6-qtbase@6.5.2-10.oe2403sp1?arch=aarch64&epoch=0&upstream=qt6-qtbase-6.5.2-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Qt6 - QtBase components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.5.2-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt6-qtbase-gui-6.5.2",
      "name": "qt6-qtbase-gui",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cd6c02991ef222f2820c2bfc788b82b79ad3672f1842ead991a005702d47124b"
        }
      ],
      "description": "Qt6 libraries used for drawing widgets and OpenGL items.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt6-qtbase-gui@6.5.2-10.oe2403sp1?arch=aarch64&epoch=0&upstream=qt6-qtbase-6.5.2-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Qt6 GUI-related libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.5.2-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt6-qtdeclarative-6.5.2",
      "name": "qt6-qtdeclarative",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ef0b84b54b8ce381b9dc1ce7165bc18c2cd6af8dd1afc79368b392348822fa17"
        }
      ],
      "description": "Qt6 - QtDeclarative component.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt6-qtdeclarative@6.5.2-2.oe2403sp1?arch=aarch64&epoch=0&upstream=qt6-qtdeclarative-6.5.2-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Qt6 - QtDeclarative component",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.5.2-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt6-qtpdf-6.5.2",
      "name": "qt6-qtpdf",
      "licenseConcluded": "BSD-3-Clause and GPL-3.0-only and LGPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "143cd5896a6df46db644815b11f6dab584a302e0ae5543d6b45ee68eb2379993"
        }
      ],
      "description": "Qt6 - QtPdf components.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt6-qtpdf@6.5.2-7.oe2403sp1?arch=aarch64&epoch=0&upstream=qt6-qtwebengine-6.5.2-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "BSD-3-Clause and GPL-3.0-only and LGPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "Qt6 - QtPdf components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.5.2-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/1389ffdb5b166c86e334884e2384663dfc02be1592b5725c15fd6cb7c17a4d90-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-alsa-lib-1.2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-expat-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ffmpeg-libs-6.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lcms2-2.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libevent-2.1.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libicu-74.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libvpx-1.13.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxkbfile-1.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mesa-libgbm-24.0.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pipewire-libs-0.3.63"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt6-qtbase-6.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt6-qtbase-gui-6.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt6-qtdeclarative-6.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt6-qtpdf-6.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt6-qtwebengine-6.5.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
