{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "grilo-0.0.3.16-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/grilo-0.0.3.16-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-grilo-0.3.16",
      "name": "grilo",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e97be9857c4a2e569220486a3ce4bf716cba778622ee02565ad25e7a78975553"
        }
      ],
      "description": "Grilo is a framework focused on making media discovery and browsing easy for\napplication developers.\n\nMore precisely, Grilo provides:\n\nA single, high-level API that abstracts the differences among various media\ncontent providers, allowing application developers to integrate content from\nvarious services and sources easily.\nA collection of plugins for accessing content from various media providers.\nDevelopers can share efforts and code by writing plugins for the framework\nthat are application agnostic.\nA flexible API that allows plugin developers to write plugins of various kinds.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/grilo@0.3.16-1.oe2403sp4?arch=aarch64&epoch=0&upstream=grilo-0.3.16-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/Grilo",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A framework for browsing and searching media content",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.3.16-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b63377dbcdc318afd72ce4efc4a5963337cfbc722f50f51f300eac3ebb2a793a"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=aarch64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1",
      "name": "gobject-introspection",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "800b84df3ebdb3e6bcd28c0cf7bb8319b3bb4e2d25a090579a26f07fff68ba4e"
        }
      ],
      "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files.  It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=aarch64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Introspection system for GObject-based libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.76.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.52",
      "name": "gtk3",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66040c092f85843ebd627c56f2d4077b3510a0e156502122033baff1245c6cbe"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.52-1.oe2403sp4?arch=aarch64&epoch=0&upstream=gtk3-3.24.52-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.52-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-liboauth-1.0.3",
      "name": "liboauth",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b4fb6da3852531b2ed64c3e597928d946864002b593fa54f553be89ac314d848"
        }
      ],
      "description": "a POSIX-C implementation of the http://oauth.net/ protocol. libOauth provides\nfunctionality to encode URLs and sign HTTP request data according to the oAuth standard.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/liboauth@1.0.3-15.oe2403sp4?arch=aarch64&epoch=0&upstream=liboauth-1.0.3-15.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://liboauth.sourceforge.net/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OAuth library functions",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.3-15.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsoup-2.74.3",
      "name": "libsoup",
      "licenseConcluded": "LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd75fa15d469a2bd1f86a986431dc875f12ceb55865a72f5f5262a381b9a0fdb"
        }
      ],
      "description": "libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop,\nto integrate well with GNOME applications, and also has a synchronous API,\nfor use in threaded applications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsoup@2.74.3-21.oe2403sp4?arch=aarch64&epoch=0&upstream=libsoup-2.74.3-21.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/libsoup",
      "licenseDeclared": "LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "An HTTP library implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.74.3-21.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsoup3-3.4.5",
      "name": "libsoup3",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d7b87346f7fb7892a42abb43aba05d79cd3fff10fe675f317ed91637b8366806"
        }
      ],
      "description": "Libsoup is an HTTP library implementation in C. It was originally part\nof a SOAP (Simple Object Access Protocol) implementation called Soup, but\nthe SOAP and non-SOAP parts have now been split into separate packages.\n\nlibsoup uses the Glib main loop and is designed to work well with GTK\napplications. This enables GNOME applications to access HTTP servers\non the network in a completely asynchronous fashion, very similar to\nthe Gtk+ programming model (a synchronous operation mode is also\nsupported for those who want it), but the SOAP parts were removed\nlong ago.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsoup3@3.4.5-20.oe2403sp4?arch=aarch64&epoch=0&upstream=libsoup3-3.4.5-20.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/libsoup",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Soup, an HTTP library implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.4.5-20.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-totem-pl-parser-3.26.7",
      "name": "totem-pl-parser",
      "licenseConcluded": "LGPL-2.0-or-later AND LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4b9221f085cb0bb011d7226d799b8c88239c7e62e294216830a2818cdf95e873"
        }
      ],
      "description": "Totem-pl-parser is a simple GObject-based library to parse a host of playlist\nformats, as well as save those.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/totem-pl-parser@3.26.7-2.oe2403sp4?arch=aarch64&epoch=0&upstream=totem-pl-parser-3.26.7-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Apps/Videos",
      "licenseDeclared": "LGPL-2.0-or-later AND LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Library fot Totem Playlist Parser",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.26.7-2.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.52"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-liboauth-1.0.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsoup-2.74.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsoup3-3.4.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-grilo-0.3.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-totem-pl-parser-3.26.7"
    }
  ]
}