{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "rpm-build-0.4.18.2-34.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-25T17:56:39.048025213Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/rpm-build-0.4.18.2-34.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-rpm-build-4.18.2",
      "name": "rpm-build",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2ed0cf56199816ab2679a8b17adb4f746cde74233573b8689617e37b056a98aa"
        }
      ],
      "description": "This package provides scripts and executable programs that used to\nbuild rpm packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-build@4.18.2-34.oe2403sp3?arch=aarch64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "Scripts and executable programs used to build packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-34.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-bzip2-1.0.8",
      "name": "bzip2",
      "licenseConcluded": "BSD-4-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a6b6065aa67ed415b8eda44aa85b1dacff840d26b68cd4fe1ecd4753389e9515"
        }
      ],
      "description": "bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bzip2@1.0.8-9.oe2403sp3?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.sourceware.org/bzip2/",
      "licenseDeclared": "BSD-4-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A high-quality data compressor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.8-9.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-gawk-5.2.2",
      "name": "gawk",
      "licenseConcluded": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4ee347b21e38df46c25355fa0d919e7e511ce9f407333aa27821dc280fd97225"
        }
      ],
      "description": "The gawk package is the GNU implementation of awk.\nThe awk utility interprets a special-purpose programming language that\nmakes it possible to handle simple data-reformatting jobs with just a\nfew lines of code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gawk@5.2.2-3.oe2403sp3?arch=aarch64&epoch=0&upstream=gawk-5.2.2-3.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/gawk/",
      "licenseDeclared": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "The GNU version of the AWK text processing utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.2-3.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdb-headless-14.1",
      "name": "gdb-headless",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0683e4334b31b0dab0f428beac3f44f06c47636e6bf16aa8857c7cef1ede878d"
        }
      ],
      "description": "GDB, the GNU Project debugger, allows you to see what is going on inside\nanother program while it executes -- or what another program was doing\nat the moment it crashed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdb-headless@14.1-13.oe2403sp3?arch=aarch64&epoch=0&upstream=gdb-14.1-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://gnu.org/software/gdb/",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "The GNU Project debugger for C, C++, Fortran, Go and other languages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:14.1-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-gzip-1.12",
      "name": "gzip",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f202822cd81d243523c25c65c29b397c1c27d3e5f16529bb0adcbe15a0b38488"
        }
      ],
      "description": "gzip is a single-file/stream lossless data compression\nutility, where the resulting compressed file generally\nhas the suffix .gz.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gzip@1.12-7.oe2403sp3?arch=aarch64&epoch=0&upstream=gzip-1.12-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/gzip",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A data compression utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.12-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "575c75486f30bb70505c22afec5d9d4e5e5928c15a3458fe40bdf7842d779e6d"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-7.oe2403sp3?arch=aarch64&epoch=0&upstream=acl-2.3.1-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0de774174312280900ef91b8e6bad180ae7f21645523b7a696fbe5627da14baa"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-7.oe2403sp3?arch=aarch64&epoch=0&upstream=libcap-2.69-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "28428dbce89ace0d9a74d782639a320d11f30dbbb2d109f51c3cb902fbffb0c7"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-32.oe2403sp3?arch=aarch64&epoch=1&upstream=openssl-3.0.12-32.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-32.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-patch-2.7.6",
      "name": "patch",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6a19b9643e96444aa836c2a7517843914627c580be7b7327f72481a8418ca2f5"
        }
      ],
      "description": "Patch takes a patch file containing a difference listing produced by the\ndiff program and applies those differences to one or more original files,\nproducing patched versions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/patch@2.7.6-23.oe2403sp3?arch=aarch64&epoch=0&upstream=patch-2.7.6-23.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/patch/patch.html",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "Utiliity which applies a patch file to original files.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.7.6-23.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-4.18.2",
      "name": "rpm",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "791368f1bc9db3376f3cf7e20a260d9222f81da31ddf067ef6915f0d11079ed6"
        }
      ],
      "description": "The RPM Package Manager (RPM) is a powerful package management system capability as below\n\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm@4.18.2-34.oe2403sp3?arch=aarch64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "RPM Package Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-34.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-libs-4.18.2",
      "name": "rpm-libs",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59594203551894b2551c0ddfb55e54f480f6f34d35d64e04df011e125afd726e"
        }
      ],
      "description": "Shared library of rpm 4.18.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-libs@4.18.2-34.oe2403sp3?arch=aarch64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "Shared library of rpm 4.18",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-34.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-sed-4.9",
      "name": "sed",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ef6a204acafd3c6ccc23b53a716f4a0cb3445d82b7331c9224356c4a696992ba"
        }
      ],
      "description": "Sed is a non-interactive command-line text editor. A stream editor is used\nto per-form basic text transformations on an input stream (a file or input\nfrom a pipeline).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sed@4.9-5.oe2403sp3?arch=aarch64&epoch=0&upstream=sed-4.9-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/sed/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "non-interactive command-line text editor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.9-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-tar-1.35",
      "name": "tar",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "83cfb4b1b068ef5f9c8ba0657c0d2fb748b4044df878901ef48856c58037816f"
        }
      ],
      "description": "GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tar@1.35-3.oe2403sp3?arch=aarch64&epoch=2&upstream=tar-1.35-3.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/tar/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "An organized and systematic method of controlling a large amount of data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.35-3.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-5.4.7",
      "name": "xz",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f201aeb7b8a68dec4afe8ca2f974b29b1579d4867c3a086f7d23c35feb3aac82"
        }
      ],
      "description": "XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz@5.4.7-8.oe2403sp3?arch=aarch64&epoch=0&upstream=xz-5.4.7-8.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A free general-purpose data compreession software with LZMA2 algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-8.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "500ba9e8acb18ca462f131eaed0e3d2cf0fd3ce05ef8e8e35884e5d0d45323d0"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-8.oe2403sp3?arch=aarch64&epoch=0&upstream=xz-5.4.7-8.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-8.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5130eb6aecea73f74d04ca756ee5bd7ddd7b972a4594cb29ea020bb5be27a6a9"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/3aed67b59a46e7d4ddd2f1b5164fb6d24b870eae0d80231ea2e10112c4792302-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bzip2-1.0.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gawk-5.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdb-headless-14.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gzip-1.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-patch-2.7.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-libs-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sed-4.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tar-1.35"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}