{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cairo-0.1.18.0-2.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/cairo-0.1.18.0-2.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "licenseConcluded": "LGPLv2 or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3a3d2eb4e21a669e50c34b5c08c8a11b052e6deac667757b95441e8e7529d2f6"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "licenseDeclared": "LGPLv2 or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-fontconfig-2.15.0",
      "name": "fontconfig",
      "licenseConcluded": "MIT and Public Domain and UCD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23ed43104b8bcaccc0cd4c558b172d32e3383bb5c55f382cd1be0071daf18650"
        }
      ],
      "description": "Fontconfig  provide different font according to requirements specified by applications,discover new fonts when installed automatically\nbe used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fontconfig@2.15.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=fontconfig-2.15.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://fontconfig.org",
      "licenseDeclared": "MIT and Public Domain and UCD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Fontconfig is a library for configuring and customizing font access",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.15.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-freetype-2.13.2",
      "name": "freetype",
      "licenseConcluded": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "80eb0be17a4517fe73406c894af1761053c88c724fa32bf2ac1150540de704b2"
        }
      ],
      "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freetype@2.13.2-5.oe2403sp4?arch=aarch64&epoch=0&upstream=freetype-2.13.2-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freetype.org",
      "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "FreeType is a freely available software library to render fonts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.13.2-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6bf2938750575b4761515da63b39b2567bace743759240648858fddd8c8d762b"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXext-1.3.5",
      "name": "libXext",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b608db8d5ae3a691eeb2b14400efa7183b1314eb63c83b84a6f6f6f1625ed629"
        }
      ],
      "description": "The X.Org project provides an open source implementation of the X Window System.\nX.Org X11 libXext contains runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXext@1.3.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXext-1.3.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Common extensions to the X11 protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXrender-0.9.11",
      "name": "libXrender",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "817e9697443028f7da8eb31e21936050d9e448dd8c922d35d35eb317ae388a8f"
        }
      ],
      "description": "X.Org X11 libXrender runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXrender@0.9.11-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXrender-0.9.11-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXrender runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.11-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "licenseConcluded": "Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "995d81bcb404c9ed0ae096092ab83f19788dc496bd076c0b35d5b169f22f8309"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-11.oe2403sp4?arch=aarch64&epoch=2&upstream=libpng-1.6.40-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "licenseDeclared": "Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxcb-1.16",
      "name": "libxcb",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6182385e03cff6f47bbaf6f4df18f6ab694666af690979d6f221ffb0095fb14d"
        }
      ],
      "description": "The X protocol C-language Binding (XCB) is a replacement for Xlib featuring a\nsmall footprint, latency hiding, direct access to the protocol, improved\nthreading support, and extensibility.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxcb@1.16-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libxcb-1.16-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xcb.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A C binding to the X11 protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.16-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pixman-0.42.2",
      "name": "pixman",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0fd5985a1c09ab3da04ab89ce6307bd4d4f2efa2c9eb15f88aba481672b08540"
        }
      ],
      "description": "Pixman is a low-level software library for pixel manipulation, providing features such\\\n\\as image compositing and trapezoid rasterization.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pixman@0.42.2-1.oe2403sp4?arch=aarch64&epoch=0&upstream=pixman-0.42.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/pixman/pixman",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Pixman is a pixel manipulation library for X and Cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9902bd499d9fee53d5d0a933f781550c425e03bedd97c7dd45e967b030cf2c9a"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fontconfig-2.15.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXext-1.3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXrender-0.9.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxcb-1.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pixman-0.42.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cairo-1.18.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}