{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "fluidsynth-0.2.3.4-2.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T17:55:29.772255567Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/fluidsynth-0.2.3.4-2.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-fluidsynth-2.3.4",
      "name": "fluidsynth",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4cd557bcd70d572ff5b8d3c871789f5bbe1e501e5422627ba8868a9df28cf308"
        }
      ],
      "description": "FluidSynth is a free software synthesizer. Its currently based on the SoundFont\n2 specifications and supports real time MIDI effect controls. It can be used as a\nshared library for embedding in other applications, can play MIDI files and has\na command line shell. Many other applications use FluidSynth for audio synthesis.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fluidsynth@2.3.4-2.oe2403sp3?arch=aarch64&epoch=0&upstream=fluidsynth-2.3.4-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.fluidsynth.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/7dd4e211aed20263007a33a4450f17d900d02ba14f0023a37d919ff0389a13cb-primary.sqlite.bz2",
      "summary": "Real-time software synthesizer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.4-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-alsa-lib-1.2.10",
      "name": "alsa-lib",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0fa2d03a7434dd956429fade71fa2c004b5a261981c21277fc17ffee2393d875"
        }
      ],
      "description": "The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/alsa-lib@1.2.10-4.oe2403sp3?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-4.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://alsa-project.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/7dd4e211aed20263007a33a4450f17d900d02ba14f0023a37d919ff0389a13cb-primary.sqlite.bz2",
      "summary": "the user space library that developers compile ALSA applications against",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.10-4.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "968d688f91c671a0a9f862d552776fa7f9e5318a20a9ad8488b7c8ab588423b1"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-13.oe2403sp3?arch=aarch64&epoch=0&upstream=glib2-2.78.3-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/7dd4e211aed20263007a33a4450f17d900d02ba14f0023a37d919ff0389a13cb-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/7dd4e211aed20263007a33a4450f17d900d02ba14f0023a37d919ff0389a13cb-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsndfile-1.2.2",
      "name": "libsndfile",
      "licenseConcluded": "LGPL-2.1-or-later AND GPL-2.0-or-later AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f0c444817249d1f093df900b21a936d521659a8965edd387ed63d3ccba8fd65f"
        }
      ],
      "description": "Libsndfile is a C library for reading and writing files containing\nsampled sound such as MS Windows WAV and the Apple/SGI AIFF format\nthrough one standard library interface.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsndfile@1.2.2-4.oe2403sp3?arch=aarch64&epoch=0&upstream=libsndfile-1.2.2-4.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libsndfile.github.io/libsndfile",
      "licenseDeclared": "LGPL-2.1-or-later AND GPL-2.0-or-later AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/7dd4e211aed20263007a33a4450f17d900d02ba14f0023a37d919ff0389a13cb-primary.sqlite.bz2",
      "summary": "Library for reading and writing sound files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.2-4.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-fluidsynth-2.3.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-alsa-lib-1.2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fluidsynth-2.3.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fluidsynth-2.3.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fluidsynth-2.3.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsndfile-1.2.2"
    }
  ]
}