{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "llvm-toolset-20-clang-analyzer-0.20.1.8-11.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T17:56:00.557930832Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/llvm-toolset-20-clang-analyzer-0.20.1.8-11.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-llvm-toolset-20-clang-analyzer-20.1.8",
      "name": "llvm-toolset-20-clang-analyzer",
      "licenseConcluded": "Apache-2.0 WITH LLVM-exception OR NCSA OR MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3fb06640e48f98ad040814fcc52ca5960d1b1259ea39a837cae2ea57d8edcaff"
        }
      ],
      "description": "The Clang Static Analyzer consists of both a source code analysis\nframework and a standalone tool that finds bugs in C and Objective-C\nprograms. The standalone tool is invoked from the command-line, and is\nintended to run in tandem with a build of a project or code base.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/llvm-toolset-20-clang-analyzer@20.1.8-11.oe2403sp3?arch=noarch&epoch=0&upstream=llvm-toolset-20-20.1.8-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://llvm.org",
      "licenseDeclared": "Apache-2.0 WITH LLVM-exception OR NCSA OR MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A source code analysis framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20.1.8-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-llvm-toolset-20-clang-20.1.8",
      "name": "llvm-toolset-20-clang",
      "licenseConcluded": "NCSA",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d8e8b38ea657fcb00a70255f6f1c54ea11891ab75bf8ad0f0fa257c1fc57e015"
        }
      ],
      "description": "clang: noun\n    1. A loud, resonant, metallic sound.\n    2. The strident call of a crane or goose.\n    3. C-language family front-end toolkit.\n\nThe goal of the Clang project is to create a new C, C++, Objective C\nand Objective C++ front-end for the LLVM compiler. Its tools are built\nas libraries and designed to be loosely-coupled and extensible.\n\nInstall compiler-rt if you want the Blocks C language extension or to\nenable sanitization and profiling options when building, and\nlibomp-devel to enable -fopenmp.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/llvm-toolset-20-clang@20.1.8-11.oe2403sp3?arch=aarch64&epoch=0&upstream=llvm-toolset-20-20.1.8-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://llvm.org",
      "licenseDeclared": "NCSA",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A C language family front-end for LLVM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20.1.8-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-5.38.0",
      "name": "perl",
      "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "00c69122b2ff383a5632e0a532b2242166400f9c10616cde9d775e7bbd667c7e"
        }
      ],
      "description": "Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl@5.38.0-12.oe2403sp3?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.perl.org/",
      "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A highly capable, feature-rich programming language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:5.38.0-12.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-libs-5.38.0",
      "name": "perl-libs",
      "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5dcb949868931bc8e459964c9a4a8c26933e560e897daf750c5674d455e18073"
        }
      ],
      "description": "This package is the shared library for perl.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-libs@5.38.0-12.oe2403sp3?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.perl.org/",
      "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "The libraries for the perl",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:5.38.0-12.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-llvm-toolset-20-clang-analyzer-20.1.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-llvm-toolset-20-clang-20.1.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-llvm-toolset-20-clang-analyzer-20.1.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-5.38.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-llvm-toolset-20-clang-analyzer-20.1.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-libs-5.38.0"
    }
  ]
}