{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "exiv2-0.0.28.2-8.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-01T17:59:29.749484781Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/exiv2-0.0.28.2-8.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-exiv2-0.28.2",
      "name": "exiv2",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23c69290b761401d107946eefdd83bd321acee589412f2c1c0cb87c5af5c776a"
        }
      ],
      "description": "Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata.\nIt provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the\nICC Profile embedded within digital images in various formats.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/exiv2@0.28.2-8.oe2403sp3?arch=aarch64&epoch=0&upstream=exiv2-0.28.2-8.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.exiv2.org/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f49862b7ac3402ebeffc0dcbd02ffdd49deb2ce82b41f6605a8845a23794f2aa-primary.sqlite.bz2",
      "summary": "Exif, IPTC and XMP metadata and the ICC Profile",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.28.2-8.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-expat-2.5.0",
      "name": "expat",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "163f2c061215fbf93e10907cbb16673686c6e02d19fb0f033f79558cab072356"
        }
      ],
      "description": "expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/expat@2.5.0-14.oe2403sp3?arch=aarch64&epoch=0&upstream=expat-2.5.0-14.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libexpat.github.io/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f49862b7ac3402ebeffc0dcbd02ffdd49deb2ce82b41f6605a8845a23794f2aa-primary.sqlite.bz2",
      "summary": "An XML parser library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-14.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f49862b7ac3402ebeffc0dcbd02ffdd49deb2ce82b41f6605a8845a23794f2aa-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5130eb6aecea73f74d04ca756ee5bd7ddd7b972a4594cb29ea020bb5be27a6a9"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f49862b7ac3402ebeffc0dcbd02ffdd49deb2ce82b41f6605a8845a23794f2aa-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-exiv2-0.28.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-expat-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-exiv2-0.28.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-exiv2-0.28.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}