{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "iSulad-0.2.1.6-1.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-25T17:53:36.853182775Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/iSulad-0.2.1.6-1.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-iSulad-2.1.6",
      "name": "iSulad",
      "licenseConcluded": "Mulan PSL v2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4478f3f65fa8d32f80ccb9a75cf9ea1bff26539b8da929ae7026c23d220695e5"
        }
      ],
      "description": "This is a umbrella project for gRPC-services based Lightweight Container\nRuntime Daemon, written by C.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/iSulad@2.1.6-1.oe2403sp3?arch=x86_64&epoch=0&upstream=iSulad-2.1.6-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitee.com/openeuler/iSulad",
      "licenseDeclared": "Mulan PSL v2",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Lightweight Container Runtime Daemon",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.6-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5b9ff7dcfad4f84b7de1d2f196b2ea0b7976510cb9db329bdfc1d6cfd5b8d730"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libarchive-3.7.1",
      "name": "libarchive",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b4ab55bee093eec04ca29988bd876df2402170473cd3217f6bf83fed66c2a13c"
        }
      ],
      "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libarchive@3.7.1-10.oe2403sp3?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-10.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.libarchive.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Multi-format archive and compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.7.1-10.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "200bbeb2c4694321ee0c7d18ab787b825b4abebc49c13bb5f6796daf46bc8530"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-7.oe2403sp3?arch=x86_64&epoch=0&upstream=libcap-2.69-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2d4668b05e686400a421d6d65b013c75309b8f6ad5172def078e863add87c1ec"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-26.oe2403sp3?arch=x86_64&epoch=0&upstream=curl-8.4.0-26.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-26.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libisula-2.1.5",
      "name": "libisula",
      "licenseConcluded": "LGPLv2.1+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9b5f9f13881517ddfcffa675535cf2ddf9345fcca85ce6ebbce511d0b5eecfac"
        }
      ],
      "description": "the libisula package contains json, log and utils libraries for running iSula applications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libisula@2.1.5-1.oe2403sp3?arch=x86_64&epoch=0&upstream=lcr-2.1.5-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitee.com/openeuler/lcr",
      "licenseDeclared": "LGPLv2.1+",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Huawei container json, log and utils C Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.5-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libwebsockets-4.3.3",
      "name": "libwebsockets",
      "licenseConcluded": "LGPLv2 and Public Domain and BSD and MIT and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bce8e55110dd3281ba77029440dfdb5023560c3821db8eb76435942fcb579f46"
        }
      ],
      "description": "Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern\nnetwork protocols easily with a tiny footprint, using a nonblocking event loop.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libwebsockets@4.3.3-5.oe2403sp3?arch=x86_64&epoch=0&upstream=libwebsockets-4.3.3-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libwebsockets.org",
      "licenseDeclared": "LGPLv2 and Public Domain and BSD and MIT and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "A lightweight C library for Websockets",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.3.3-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "745a6127f8f90725163c73d95cab31016a0aee8cfcce38ea3c4ffdad262d1069"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-12.oe2403sp3?arch=x86_64&epoch=0&upstream=ncurses-6.4-12.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-12.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b03ebd64770a295dc764b3648f502da357d222f24c7fec9af46c53ba14b3752f"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-32.oe2403sp3?arch=x86_64&epoch=1&upstream=openssl-3.0.12-32.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-32.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-protobuf-25.1",
      "name": "protobuf",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5ae8da22788d8fa1d6398a6d0cb5c8847f2fb2c0222904096534ff81085d388b"
        }
      ],
      "description": "\nProtocol Buffers (a.k.a., protobuf) are Google's language-neutral,\nplatform-neutral, extensible mechanism for serializing structured data.\nYou can find protobuf's documentation on the Google Developers site.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/protobuf@25.1-13.oe2403sp3?arch=x86_64&epoch=0&upstream=protobuf-25.1-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/protocolbuffers/protobuf",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Protocol Buffers - Google's data interchange format",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:25.1-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-sqlite-3.42.0",
      "name": "sqlite",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "25d59cb2134b13694a751b6934ef4cde49871aff3807c3a7358f7d2c54215038"
        }
      ],
      "description": "SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sqlite@3.42.0-5.oe2403sp3?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sqlite.org/",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "Embeded SQL database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.42.0-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "licenseConcluded": "MIT and LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4c78e311b9bdb1e4a3ab7b7526f48ab3665bc89cca27d448930857c13953ef2e"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-57.oe2403sp3?arch=x86_64&epoch=0&upstream=systemd-255-57.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "MIT and LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-57.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "87c6435fab4c827bcab72c092fd8a7e01f04eecc71e66b74a0bdf11d2aafcaf1"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-57.oe2403sp3?arch=x86_64&epoch=0&upstream=systemd-255-57.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-57.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5e8398c87da1ae6ca0f5417dccfed134392bbbb4d396bc22a3b3aa0a9aec91d8"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libisula-2.1.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libwebsockets-4.3.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-protobuf-25.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sqlite-3.42.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-iSulad-2.1.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
