{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "kubeedge-edgecore-0.1.8.0-4.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T06:27:27.347923978Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/kubeedge-edgecore-0.1.8.0-4.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-kubeedge-edgecore-1.8.0",
      "name": "kubeedge-edgecore",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "daf5957115184ca0535c9270e553d2ebf209f13ce4e04aaa9239c17fb72cfd8a"
        }
      ],
      "description": "KubeEdge is built upon Kubernetes and extends native containerized application\norchestration and device management to hosts at the Edge. It consists of cloud\npart and edge part, provides core infrastructure support for networking,\napplication deployment and metadata synchronization between cloud and edge.\nThis package contains the edgecore binary for the edge node.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/kubeedge-edgecore@1.8.0-4.oe2403sp4?arch=aarch64&epoch=0&upstream=kubeedge-1.8.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/kubeedge/kubeedge",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f0b2606f1dc0294014b17bb8ea9231f0129611b4c9610b9db40f82da2b1f63da-primary.sqlite.bz2",
      "summary": "KubeEdge Lightweight Edge Agent (EdgeCore)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mosquitto-2.0.20",
      "name": "mosquitto",
      "licenseConcluded": "EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "848a7b50287664e57706015f0f6966722baab800477d81696fb4b71ae8ba41bb"
        }
      ],
      "description": "Mosquitto is an open source message broker that implements the MQ Telemetry\nTransport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method\nof carrying out messaging using a publish/subscribe model. This makes it\nsuitable for \"machine to machine\" messaging such as with low power sensors\nor mobile devices such as phones, embedded computers or micro-controllers\nlike the Arduino.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mosquitto@2.0.20-2.oe2403sp4?arch=aarch64&epoch=0&upstream=mosquitto-2.0.20-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://mosquitto.org/",
      "licenseDeclared": "EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f0b2606f1dc0294014b17bb8ea9231f0129611b4c9610b9db40f82da2b1f63da-primary.sqlite.bz2",
      "summary": "Open Source MQTT v3.1/v3.1.1 Broker",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.20-2.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-kubeedge-edgecore-1.8.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mosquitto-2.0.20"
    }
  ]
}