{ "SPDXID": "SPDXRef-DOCUMENT", "name": "flatpak-0.1.10.2-12.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T04:28:12.092529219Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/flatpak-0.1.10.2-12.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-flatpak-1.10.2", "name": "flatpak", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "85a87cc083b523a2a49a66dcca750b32dfee9c86e0631f281e7bf5a0caed5e1e" } ], "description": "flatpak is a system for building, distributing and running sandboxed desktop\napplications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for\nmore information.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/flatpak@1.10.2-12.oe2403sp4?arch=aarch64&epoch=0&upstream=flatpak-1.10.2-12.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://flatpak.org/", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Application deployment framework for desktop apps", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.10.2-12.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-bash-5.2.15", "name": "bash", "licenseConcluded": "GPLv3", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9e44c67402e88f8c3409ae71f375e1239d0fe67abb011f90acd3cff8eed95a11" } ], "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=aarch64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/bash", "licenseDeclared": "GPLv3", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "It is the Bourne Again Shell", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.2.15-19.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-bubblewrap-0.8.0", "name": "bubblewrap", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "40f3800038c611649c3c87978ae80182db6bb2eda7fd8ecfe7e406747afc060d" } ], "description": "There is an effort in the Linux kernel called user namespaces which\nattempts to allow unprivileged users to use container features.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/bubblewrap@0.8.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=bubblewrap-0.8.0-2.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/projectatomic/bubblewrap", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Core execution tool for unprivileged containers", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.8.0-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9a45326d88eefd6f8a0018a1626f7decc11e3649f47296d7ce55e5ce473c3296" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=aarch64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-22.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-dconf-0.40.0", "name": "dconf", "licenseConcluded": "LGPLv2+ and GPLv2+ and GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "acce5418aafa51d5560ce3655574751e58f8512c393bfbc5301586ffd663d614" } ], "description": "Dconf is a low-level configuration system. Its main purpose is to provide a backend\nto GSettings on platforms that don't already have configuration storage systems.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/dconf@0.40.0-3.oe2403sp4?arch=aarch64&epoch=0&upstream=dconf-0.40.0-3.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://live.gnome.org/dconf", "licenseDeclared": "LGPLv2+ and GPLv2+ and GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Dconf provides a backend to the GSettings API in Glib", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.40.0-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-fuse-2.9.9", "name": "fuse", "licenseConcluded": "GPL-1.0-or-later and LGPL-2.1-or-later", "checksums": [ { "algorithm": "SHA256", "checksumValue": "db68077c6770523af839abb59cb0208abd563c9e05717cc04f4addf05fd82ee5" } ], "description": "FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/fuse@2.9.9-12.oe2403sp4?arch=aarch64&epoch=0&upstream=fuse-2.9.9-12.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://fuse.sf.net", "licenseDeclared": "GPL-1.0-or-later and LGPL-2.1-or-later", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "User space File System of fuse2", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.9.9-12.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10", "name": "gdk-pixbuf2", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ffd39c1e6bb481d1c5ee24ca2ebaa0b2d141e3efac61d99ffc67533386560b22" } ], "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-7.oe2403sp4?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-7.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.42.10-7.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-glib2-2.78.3", "name": "glib2", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b63377dbcdc318afd72ce4efc4a5963337cfbc722f50f51f300eac3ebb2a793a" } ], "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=aarch64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gtk.org", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "The core library that forms the basis for projects such as GTK+ and GNOME", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.78.3-16.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-107.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1", "name": "gobject-introspection", "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "800b84df3ebdb3e6bcd28c0cf7bb8319b3bb4e2d25a090579a26f07fff68ba4e" } ], "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files. It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=aarch64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection", "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Introspection system for GObject-based libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.76.1-4.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gpgme-1.21.0", "name": "gpgme", "licenseConcluded": "GPLv2+ and LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "208796089a157e26482a946f3e9fd0a808899157e4e9bb091f1f0a04beda9c6d" } ], "description": "GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications. It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gnupg.org/related_software/gpgme/", "licenseDeclared": "GPLv2+ and LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "GnuPG Made Easy", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.21.0-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-json-glib-1.8.0", "name": "json-glib", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a85a4915d24e8ff371f753f10045132be3863fcf0fb0c86fa60cc97886f3baac" } ], "description": "JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/json-glib@1.8.0-1.oe2403sp4?arch=aarch64&epoch=0&upstream=json-glib-1.8.0-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/JsonGlib", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Library for lightweight data-interchange format", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.8.0-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libXau-1.0.11", "name": "libXau", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6f5759dcd50e18abc6e06f94c54b5bab9b9a33ce7b9e313b73bf8e3694dc53ae" } ], "description": "This is a very simple mechanism for providing individual access to an X Window\nSystem display.It uses existing core protocol and library hooks for specifying\nauthorization data in the connection setup block to restrict use of the display\nto only those clients that show that they know a server-specific key\ncalled a \"magic cookie\".", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libXau@1.0.11-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXau-1.0.11-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.x.org", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Sample Authorization Protocol for X", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.0.11-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libappstream-glib-0.8.2", "name": "libappstream-glib", "licenseConcluded": "LGPLv2+ and GPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7084291f85a2f0a52c2041bef6e97b71d7e41ed98b08b5ef623cdb93e50c4819" } ], "description": "The library provides GObjects and helper methods for easier reading and\nWrite AppStream metadata. At the same time, it provides a simple DOM\nimplementation to achieve more efficient conversion between edit nodes\nand standard XML.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libappstream-glib@0.8.2-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libappstream-glib-0.8.2-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://people.freedesktop.org/~hughsient/appstream-glib/", "licenseDeclared": "LGPLv2+ and GPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "AppStream Abstraction Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.8.2-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libarchive-3.7.1", "name": "libarchive", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f263a4e6d19b94541236e4d12052a53c4e195085f0fb9a315196b82413823808" } ], "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libarchive@3.7.1-11.oe2403sp4?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-11.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.libarchive.org/", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Multi-format archive and compression library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.7.1-11.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-librsvg2-2.57.1", "name": "librsvg2", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a22d2bbe87aa1a2ab869ef74806cd22b584347a0a038aeffa60fdcbd53b005a2" } ], "description": "An SVG library based on cairo.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/librsvg2@2.57.1-6.oe2403sp4?arch=aarch64&epoch=0&upstream=librsvg2-2.57.1-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/LibRsvg", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "An SVG library based on cairo", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.57.1-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libseccomp-2.5.4", "name": "libseccomp", "licenseConcluded": "LGPLv2", "checksums": [ { "algorithm": "SHA256", "checksumValue": "cba9efcc7a7d6f231b6376ff6591ba116e7b7c4b8664f4c8ae1087423696985b" } ], "description": "The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libseccomp@2.5.4-5.oe2403sp4?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-5.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/seccomp/libseccomp", "licenseDeclared": "LGPLv2", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Interface to the syscall filtering mechanism", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.5.4-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libsoup-2.74.3", "name": "libsoup", "licenseConcluded": "LGPLv2", "checksums": [ { "algorithm": "SHA256", "checksumValue": "dd75fa15d469a2bd1f86a986431dc875f12ceb55865a72f5f5262a381b9a0fdb" } ], "description": "libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop,\nto integrate well with GNOME applications, and also has a synchronous API,\nfor use in threaded applications.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libsoup@2.74.3-21.oe2403sp4?arch=aarch64&epoch=0&upstream=libsoup-2.74.3-21.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/libsoup", "licenseDeclared": "LGPLv2", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "An HTTP library implementation", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.74.3-21.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libxml2-2.11.9", "name": "libxml2", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b4144418d1b182c872a540b9444982d37d76c28a9d00284c27e220a3b40b66fd" } ], "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libxml2@2.11.9-13.oe2403sp4?arch=aarch64&epoch=0&upstream=libxml2-2.11.9-13.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://xmlsoft.org/", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Library providing XML and HTML support", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.11.9-13.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-ostree-2024.4", "name": "ostree", "licenseConcluded": "LGPL-2.0-or-later", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9c9f81bf3a05c33afc61017402ef06150edd60559becb7400cfc07abbeb56996" } ], "description": "This project is now known as \"libostree\", though it is still appropriate to use the previous name: \"OSTree\"\n(or \"ostree\"). The focus is on projects which use libostree's shared library, rather than users directly\ninvoking the command line tools (except for build systems). However, in most of the rest of the documentation,\nwe will use the term \"OSTree\", since it's slightly shorter, and changing all documentation at once is impractical.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/ostree@2024.4-1.oe2403sp4?arch=aarch64&epoch=0&upstream=ostree-2024.4-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://ostree.readthedocs.io/en/latest/", "licenseDeclared": "LGPL-2.0-or-later", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Tool for managing bootable, immutable filesystem trees", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2024.4-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-polkit-libs-123", "name": "polkit-libs", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "58a2493752110a39e8372316b708d6d17b49ec5003fb167b9da418ac4758ae50" } ], "description": "Libraries files for polkit.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/polkit-libs@123-4.oe2403sp4?arch=aarch64&epoch=0&upstream=polkit-123-4.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.freedesktop.org/wiki/Software/polkit", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Libraries for polkit", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:123-4.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-python3-gobject-base-3.46.0", "name": "python3-gobject-base", "licenseConcluded": "LGPL-2.1-or-later and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fef0481a4ef225cbba7152297d51aa86253549473751d46fcfdd028c682d7ff2" } ], "description": "This package provides the non-cairo specific bits of the GObject Introspection\nlibrary.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/python3-gobject-base@3.46.0-3.oe2403sp4?arch=aarch64&epoch=0&upstream=pygobject3-3.46.0-3.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/PyGObject", "licenseDeclared": "LGPL-2.1-or-later and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "base package for python3-gobject package", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.46.0-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-shadow-4.14.3", "name": "shadow", "licenseConcluded": "BSD and GPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "12132c219b316b027d3910effca343da906065d681eb641bf8fbdec42b8b242f" } ], "description": "This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/shadow@4.14.3-8.oe2403sp4?arch=aarch64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://pkg-shadow.alioth.debian.org/", "licenseDeclared": "BSD and GPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Tools for managing accounts and shadow password files", "supplier": "Organization: http://openeuler.org", "versionInfo": "2:4.14.3-8.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-systemd-255", "name": "systemd", "licenseConcluded": "MIT and LGPLv2+ and GPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9cd0808d44a64af9f3cbc48e55078e63635c050abc77b644485604a5f12bf3b2" } ], "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/systemd@255-59.oe2403sp4?arch=aarch64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://systemd.io/", "licenseDeclared": "MIT and LGPLv2+ and GPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "System and Service Manager", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:255-59.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-systemd-libs-255", "name": "systemd-libs", "licenseConcluded": "LGPLv2+ and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "559e09eb493b0252adb73bb5aa4f41f2031b3b6de6c9ba01a9e4f524e64cf769" } ], "description": "Libraries for systemd and udev.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=aarch64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://systemd.io/", "licenseDeclared": "LGPLv2+ and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "systemd libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:255-59.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-xdg-dbus-proxy-0.1.2", "name": "xdg-dbus-proxy", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "93d0b85ba162b032f33e4406f68a3ea2de10cd0291e92180ed920ff8d935156b" } ], "description": "xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally\npart of the flatpak project, but it has been broken out as a standalone module\nto facilitate using it in other contexts.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/xdg-dbus-proxy@0.1.2-2.oe2403sp4?arch=aarch64&epoch=0&upstream=xdg-dbus-proxy-0.1.2-2.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/flatpak/xdg-dbus-proxy/", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Filtering proxy for D-Bus connections", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.1.2-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-zstd-1.5.5", "name": "zstd", "licenseConcluded": "BSD and GPLv2", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d5fab9f7f7896f15b7af22851ef60dd515d16c831ff3a517600732f09adf8593" } ], "description": "Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/zstd@1.5.5-4.oe2403sp4?arch=aarch64&epoch=0&upstream=zstd-1.5.5-4.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/facebook/zstd", "licenseDeclared": "BSD and GPLv2", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A fast lossless compression algorithm", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.5.5-4.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-bubblewrap-0.8.0" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-dconf-0.40.0" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-fuse-2.9.9" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gpgme-1.21.0" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-json-glib-1.8.0" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libXau-1.0.11" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libappstream-glib-0.8.2" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-librsvg2-2.57.1" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libseccomp-2.5.4" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libsoup-2.74.3" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.9" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-ostree-2024.4" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-polkit-libs-123" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-python3-gobject-base-3.46.0" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-shadow-4.14.3" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-systemd-255" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-xdg-dbus-proxy-0.1.2" }, { "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-zstd-1.5.5" } ] }