{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "python3-bandit-0.1.7.5-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T06:18:35.28438444Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/python3-bandit-0.1.7.5-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-python3-bandit-1.7.5",
      "name": "python3-bandit",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a3ae1016762062a5daf8b5ff40f2bad88561a635f051cadf57a107c65bb88fa4"
        }
      ],
      "description": "A security linter from PyCQA",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-bandit@1.7.5-1.oe2403sp4?arch=noarch&epoch=0&upstream=python-bandit-1.7.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/PyCQA/bandit",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1878cc60a19e65efc93d1a539275c5a6799b0acbd7796ee105712c44cae47ab4-primary.sqlite.bz2",
      "summary": "Security oriented static analyser for python code.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-stevedore-5.1.0",
      "name": "python3-stevedore",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "673318d3821a057af2c8f20f969474d47eab82067011106d2eacbc3bb1ecd9b9"
        }
      ],
      "description": "Manage dynamic plugins for Python applications",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-stevedore@5.1.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=python-stevedore-5.1.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://docs.openstack.org/stevedore/latest/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/1878cc60a19e65efc93d1a539275c5a6799b0acbd7796ee105712c44cae47ab4-primary.sqlite.bz2",
      "summary": "Manage dynamic plugins for Python applications",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.1.0-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-python3-bandit-1.7.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-stevedore-5.1.0"
    }
  ]
}