{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cdbs-0.0.4.166-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/cdbs-0.0.4.166-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-cdbs-0.4.166",
      "name": "cdbs",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59a5f355c3bc124ab17c3680e739b49a63a5ca5c1f4da917c4960bae06abab83"
        }
      ],
      "description": "This package contains the Common Debian Build System, an abstract build system\nbased on Makefile inheritance which is completely extensible and overridable.\nIn other words, CDBS provides a sane set of default rules upon which packages\ncan build; any or all rules may be overridden as needed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cdbs@0.4.166-1.oe2403sp4?arch=noarch&epoch=0&upstream=cdbs-0.4.166-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://salsa.debian.org/build-common-team/cdbs",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Common build system for Debian packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4.166-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9e44c67402e88f8c3409ae71f375e1239d0fe67abb011f90acd3cff8eed95a11"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=aarch64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a45326d88eefd6f8a0018a1626f7decc11e3649f47296d7ce55e5ce473c3296"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=aarch64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-5.38.0",
      "name": "perl",
      "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6a219e87ba15fd71cefd81a8c9221532a409d314a7003a4dc39ae45c04a519c"
        }
      ],
      "description": "Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl@5.38.0-12.oe2403sp4?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.perl.org/",
      "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A highly capable, feature-rich programming language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:5.38.0-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-Font-TTF-1.06",
      "name": "perl-Font-TTF",
      "licenseConcluded": "Artistic 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "444e22bff15dae091adcbd0d1e29f86c113fddcaa390f4518abab607cd22d745"
        }
      ],
      "description": "The package provides perl module for TrueType font hacking. It supports reading,\nprocessing and writing of the tables.you can do almost anything with a standard\nTrueType font with this module.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-Font-TTF@1.06-9.oe2403sp4?arch=noarch&epoch=0&upstream=perl-Font-TTF-1.06-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://metacpan.org/release/Font-TTF",
      "licenseDeclared": "Artistic 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Perl library for modifying TTF font files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.06-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-Getopt-Long-2.57",
      "name": "perl-Getopt-Long",
      "licenseConcluded": "Artistic or GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8e26808cd820c23c4ca72bb3a8c57732ca3e633b10c43d2cb8b53972e5f174e7"
        }
      ],
      "description": "Module Getopt::Long implements an extended getopt function called\nGetOptions(). This function implements the POSIX standard for command\nline options, with GNU extensions, while still capable of handling\nthe traditional one-letter options.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-Getopt-Long@2.57-1.oe2403sp4?arch=noarch&epoch=1&upstream=perl-Getopt-Long-2.57-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://metacpan.org/pod/Getopt::Long",
      "licenseDeclared": "Artistic or GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Extended processing of command line options",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:2.57-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-Image-ExifTool-13.55",
      "name": "perl-Image-ExifTool",
      "licenseConcluded": "GPL-1.0-or-later or Artistic-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2c412752460d3ba2730cf58744f64714dd3f53a83e385ebd313db7b0b6f6c41"
        }
      ],
      "description": "ExifTool is a Perl module with an included command-line application for\nreading and writing meta information in image, audio, and video files.\nIt reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile,\nPhotoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2,\nTIFF, GIF, PNG, MNG, JNG, MIFF, EPS, PS, AI, PDF, PSD, BMP, THM, CRW,\nCR2, MRW, NEF, PEF, ORF, DNG, and many other types of images. ExifTool\nalso extracts information from the maker notes of many digital cameras\nby various manufacturers including Canon, Casio, FujiFilm, GE, HP,\nJVC/Victor, Kodak, Leaf, Minolta/Konica-Minolta, Nikon, Olympus/Epson,\nPanasonic/Leica, Pentax/Asahi, Reconyx, Ricoh, Samsung, Sanyo,\nSigma/Foveon, and Sony.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-Image-ExifTool@13.55-1.oe2403sp4?arch=noarch&epoch=0&upstream=perl-Image-ExifTool-13.55-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://exiftool.org/",
      "licenseDeclared": "GPL-1.0-or-later or Artistic-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Utility for reading and writing image meta info",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:13.55-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-Pod-Usage-2.03",
      "name": "perl-Pod-Usage",
      "licenseConcluded": "GPL+ or Artistic-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "21a8c29239b7f853ae2befdf394dde1307df62c663f12d49ea0a9f3489f2f45f"
        }
      ],
      "description": "Pod2usage will print a usage message for the invoking script (using its embedded pod documentation)\nand then exit the script with the desired exit status. The usage message printed may have any one\nof three levels of \"verboseness\": If the verbose level is 0, then only a synopsis is printed. If\nthe verbose level is 1, then the synopsis is printed along with a description (if present) of the\ncommand line options and arguments. If the verbose level is 2, then the entire manual page is printed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-Pod-Usage@2.03-2.oe2403sp4?arch=noarch&epoch=4&upstream=perl-Pod-Usage-2.03-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://metacpan.org/release/Pod-Usage",
      "licenseDeclared": "GPL+ or Artistic-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Print a usage message from embedded pod documentation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:2.03-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-Regexp-Assemble-0.38",
      "name": "perl-Regexp-Assemble",
      "licenseConcluded": "GPL-1.0-or-later OR Artistic-1.0-Perl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37d7a556590dc6daed6a87e6cba5aed0404acc5c923b23b50b331d3c910e2161"
        }
      ],
      "description": "Regexp::Assemble takes an arbitrary number of regular expressions and\nassembles them into a single regular expression (or RE) that matches all\nthat the individual REs match.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-Regexp-Assemble@0.38-1.oe2403sp4?arch=noarch&epoch=0&upstream=perl-Regexp-Assemble-0.38-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://metacpan.org/release/Regexp-Assemble",
      "licenseDeclared": "GPL-1.0-or-later OR Artistic-1.0-Perl",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Assemble multiple Regular Expressions into a single RE",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.38-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-autodie-2.36",
      "name": "perl-autodie",
      "licenseConcluded": "GPL-1.0-or-later OR Artistic-1.0-Perl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6e4542a839959e36f4661829a5a3f02a412c6786c174c226e0e5e86881821cb3"
        }
      ],
      "description": "The autodie pragma provides a convenient way to replace functions that normally return\nfalse on failure with equivalents that throw an exception on failure.\n\nThe autodie pragma has lexical scope, meaning that functions and subroutines altered with\nautodie will only change their behaviour until the end of the enclosing block, file, or eval.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-autodie@2.36-1.oe2403sp4?arch=noarch&epoch=0&upstream=perl-autodie-2.36-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://metacpan.org/release/autodie",
      "licenseDeclared": "GPL-1.0-or-later OR Artistic-1.0-Perl",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Replace functions with ones that succeed or die with lexical scope",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.36-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-libs-5.38.0",
      "name": "perl-libs",
      "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "383c1f0aa78ea84879fb79106d660f755942fc6e8b3825c329da257e9b0a84fb"
        }
      ],
      "description": "This package is the shared library for perl.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl-libs@5.38.0-12.oe2403sp4?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.perl.org/",
      "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The libraries for the perl",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:5.38.0-12.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-5.38.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-Font-TTF-1.06"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-Getopt-Long-2.57"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-Image-ExifTool-13.55"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-Pod-Usage-2.03"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-Regexp-Assemble-0.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-autodie-2.36"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cdbs-0.4.166",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-libs-5.38.0"
    }
  ]
}