{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "conmon-2.2.1.10-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/conmon-2.2.1.10-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-conmon-2.1.10",
      "name": "conmon",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3fc570bf3eff24dd55706f383bc7c47b00dbd2e65350a340f2f181f4cd802956"
        }
      ],
      "description": "Conmon is a monitoring program and communication tool between a container manager (like podman or CRI-O)\nand an OCI runtime (like runc or crun) for a single container.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/conmon@2.1.10-1.oe2403sp4?arch=aarch64&epoch=2&upstream=conmon-2.1.10-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/conmon",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Monitoring program for OCI container",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:2.1.10-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b63377dbcdc318afd72ce4efc4a5963337cfbc722f50f51f300eac3ebb2a793a"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=aarch64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libseccomp-2.5.4",
      "name": "libseccomp",
      "licenseConcluded": "LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cba9efcc7a7d6f231b6376ff6591ba116e7b7c4b8664f4c8ae1087423696985b"
        }
      ],
      "description": "The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libseccomp@2.5.4-5.oe2403sp4?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/seccomp/libseccomp",
      "licenseDeclared": "LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Interface to the syscall filtering mechanism",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.4-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "559e09eb493b0252adb73bb5aa4f41f2031b3b6de6c9ba01a9e4f524e64cf769"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=aarch64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-conmon-2.1.10",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-conmon-2.1.10",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-conmon-2.1.10",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libseccomp-2.5.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-conmon-2.1.10",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    }
  ]
}